$devvkit resources --cheatsheet docker-cheatsheet

Docker Cheatsheet

[containers]

Every Docker command for building, running, and debugging containers: from image management to Compose, with syntax and real use cases.100 commands · 6 sections

Docker packages applications into portable containers. This cheatsheet covers the full workflow: building and managing images, running and stopping containers, attaching shells and logs for debugging, volumes and networks, Docker Compose for multi-container apps, and system cleanup.

Every command shows its real syntax followed by the use case: when and why you reach for it.

Image Management18

$docker images

Use case: List all local images with tags, sizes, and creation dates.Example: docker images

$docker image ls --filter "dangling=true"

Use case: Find untagged (dangling) images: leftover build layers to clean.Example: docker image ls --filter "dangling=true"

$docker pull <image>

Use case: Download an image from a registry.Example: docker pull node:22-alpine

$docker build -t <name>:<tag> .

Use case: Build an image from a Dockerfile in the current directory and tag it.Example: docker build -t myapp:1.0 .

$docker build --no-cache -t <name> .

Use case: Rebuild ignoring the layer cache: force fresh RUN steps, e.g. after apt changes.Example: docker build --no-cache -t myapp .

$docker build --target <stage> -t <name> .

Use case: Build up to a specific multi-stage build target: dev stage for development images.Example: docker build --target dev -t myapp:dev .

$docker build --platform linux/amd64 -t <name> .

Use case: Build for a different platform: cross-compile images for ARM or x86 from any host.Example: docker build --platform linux/amd64 -t myapp .

$docker tag <image> <name>:<tag>

Use case: Add a new tag to an existing image: tag your build before pushing.Example: docker tag myapp:1.0 myapp:latest

$docker push <name>:<tag>

Use case: Upload an image to a registry (Docker Hub, GHCR, ECR...).Example: docker push user/myapp:1.0

$docker rmi <image>

Use case: Remove an image locally (stop its containers first).Example: docker rmi myapp:1.0

$docker image prune

Use case: Remove dangling images to reclaim disk.Example: docker image prune

$docker image prune -a

Use case: Remove ALL unused images, not just dangling ones.Example: docker image prune -a

$docker history <image>

Use case: Show the layer build history of an image: inspect what it contains.Example: docker history myapp

$docker inspect <image>

Use case: Show detailed image metadata as JSON: config, env, ports, labels.Example: docker inspect myapp

$docker save -o myapp.tar <image>

Use case: Export an image to a tar file: move images between machines without a registry.Example: docker save -o myapp.tar myapp:1.0

$docker load -i myapp.tar

Use case: Import an image from a tar file created with docker save.Example: docker load -i myapp.tar

$docker search <term>

Use case: Search Docker Hub for images.Example: docker search postgres

$docker manifest inspect <image>

Use case: Show which platforms an image supports: check ARM/amd64 availability.Example: docker manifest inspect node:22

Container Lifecycle29

$docker run <image>

Use case: Create and start a container from an image.Example: docker run nginx

$docker run -it <image> /bin/bash

Use case: Run an interactive shell inside a container: explore the image or test commands.Example: docker run -it ubuntu /bin/bash

$docker run -d --name <name> <image>

Use case: Run a container in the background with a stable name.Example: docker run -d --name web nginx

$docker run -p 8080:80 <image>

Use case: Publish container port 80 to host port 8080: expose your app.Example: docker run -p 8080:80 nginx

$docker run -p 127.0.0.1:5432:5432 <image>

Use case: Bind a port to localhost only: keep databases private, never exposed publicly.Example: docker run -p 127.0.0.1:5432:5432 postgres

$docker run --env VAR=value <image>

Use case: Pass environment variables to the container.Example: docker run --env NODE_ENV=production myapp

$docker run --env-file .env <image>

Use case: Load environment variables from a file: keep secrets out of your shell history.Example: docker run --env-file .env myapp

$docker run --rm <image>

Use case: Automatically remove the container when it exits: perfect for one-off jobs.Example: docker run --rm alpine echo hello

$docker run --restart unless-stopped <image>

Use case: Auto-restart the container unless you explicitly stop it: for services.Example: docker run -d --restart unless-stopped redis

$docker run --memory 512m --cpus 1 <image>

Use case: Limit container memory and CPU: protect your host from runaway processes.Example: docker run --memory 512m --cpus 1 myapp

$docker run --network host <image>

Use case: Share the host network: no port mapping needed, container uses host ports directly.Example: docker run --network host myapp

$docker run --network <network> <image>

Use case: Attach the container to a custom network: container-to-container DNS by name.Example: docker run --network app-net myapp

$docker run --init <image>

Use case: Use tini as PID 1 so Ctrl+C and signals work properly: fixes zombie processes.Example: docker run --init myapp

$docker ps

Use case: List running containers.Example: docker ps

$docker ps -a

Use case: List ALL containers including stopped ones: find that container you lost.Example: docker ps -a

$docker ps --filter "status=exited"

Use case: List only exited containers: cleanup candidates.Example: docker ps --filter "status=exited"

$docker start <name>

Use case: Restart an existing stopped container: keeps its state and filesystem.Example: docker start web

$docker stop <name>

Use case: Gracefully stop a container (SIGTERM, then SIGKILL after timeout).Example: docker stop web

$docker stop $(docker ps -q)

Use case: Stop every running container at once.Example: docker stop $(docker ps -q)

$docker restart <name>

Use case: Stop and start a container: apply new restart policy or clear a stuck state.Example: docker restart web

$docker kill <name>

Use case: Immediately kill a container without grace period: for unresponsive ones.Example: docker kill web

$docker rm <name>

Use case: Delete a stopped container.Example: docker rm web

$docker rm -f $(docker ps -aq)

Use case: Force-remove every container: nuclear reset of local containers.Example: docker rm -f $(docker ps -aq)

$docker container prune

Use case: Remove all stopped containers.Example: docker container prune

$docker top <name>

Use case: Show the processes running inside a container: like ps for containers.Example: docker top web

$docker stats

Use case: Live CPU/memory/network usage of running containers: find the hungry one.Example: docker stats

$docker cp <name>:/path /host/path

Use case: Copy files out of a container: pull logs or artifacts.Example: docker cp web:/app/report.pdf ./report.pdf

$docker cp /host/file <name>:/path

Use case: Copy files into a running container: quick config drops.Example: docker cp config.json web:/app/config.json

$docker wait <name>

Use case: Block until a container exits and print its exit code: scripting friendly.Example: docker wait web

Debugging & Shell12

$docker logs <name>

Use case: Show container logs: the first stop when debugging.Example: docker logs web

$docker logs -f <name>

Use case: Follow logs live, like tail -f.Example: docker logs -f web

$docker logs --tail 100 <name>

Use case: Show only the last 100 lines: skip the startup noise.Example: docker logs --tail 100 web

$docker logs --since 5m <name>

Use case: Show logs from the last 5 minutes: after an incident.Example: docker logs --since 5m web

$docker exec -it <name> /bin/sh

Use case: Open an interactive shell inside a running container: alpine images need sh.Example: docker exec -it web /bin/sh

$docker exec <name> <cmd>

Use case: Run a single command inside a container: check env or run a script.Example: docker exec web node -v

$docker exec -it <name> /bin/bash -lc "command"

Use case: Run a command with a login shell so PATH and env are fully loaded.Example: docker exec -it web /bin/bash -lc "npm test"

$docker attach <name>

Use case: Attach to a container's STDIN/STDOUT: watch an interactive process.Example: docker attach web

$docker port <name>

Use case: Show the published port mappings of a container.Example: docker port web

$docker diff <name>

Use case: Show files changed inside a container since it started: find unexpected writes.Example: docker diff web

$docker events

Use case: Stream all container/image events in real time: observe lifecycle.Example: docker events

$docker system events --filter "container=web"

Use case: Watch events for a single container: debug restarts.Example: docker system events --filter "container=web"

Volumes & Networks15

$docker volume create <name>

Use case: Create a named volume for persistent data.Example: docker volume create pgdata

$docker run -v <name>:/data <image>

Use case: Mount a named volume at /data: survives container removal.Example: docker run -v pgdata:/var/lib/postgresql/data postgres

$docker run -v $(pwd):/app <image>

Use case: Mount the current directory into the container: live development without rebuilding.Example: docker run -v $(pwd):/app node:22 node app.js

$docker run -v /host/path:/container/path:ro <image>

Use case: Mount a host path read-only: share config that must not change.Example: docker run -v /etc/ssl:/certs:ro myapp

$docker run --tmpfs /tmp <image>

Use case: Mount an ephemeral in-memory tmpfs: fast scratch space, nothing persists.Example: docker run --tmpfs /tmp myapp

$docker volume ls

Use case: List all volumes.Example: docker volume ls

$docker volume inspect <name>

Use case: Show volume details: mountpoint on the host.Example: docker volume inspect pgdata

$docker volume rm <name>

Use case: Delete a volume: permanently removes its data.Example: docker volume rm pgdata

$docker volume prune

Use case: Remove all volumes not used by any container: be careful, data is gone.Example: docker volume prune

$docker network create <name>

Use case: Create a user-defined bridge network: containers get DNS by name.Example: docker network create app-net

$docker network ls

Use case: List all networks.Example: docker network ls

$docker network connect <net> <container>

Use case: Attach a running container to another network: connect app to database.Example: docker network connect app-net web

$docker network disconnect <net> <container>

Use case: Detach a container from a network.Example: docker network disconnect app-net web

$docker network inspect <net>

Use case: Show a network's containers and configuration.Example: docker network inspect app-net

$docker network prune

Use case: Remove unused networks.Example: docker network prune

Docker Compose16

$docker compose up

Use case: Create and start all services defined in docker-compose.yml (foreground).Example: docker compose up

$docker compose up -d

Use case: Start services in the background.Example: docker compose up -d

$docker compose up --build

Use case: Rebuild images before starting: apply Dockerfile changes.Example: docker compose up --build

$docker compose -f docker-compose.prod.yml up -d

Use case: Use a specific compose file: env-specific overrides.Example: docker compose -f docker-compose.prod.yml up -d

$docker compose down

Use case: Stop and remove services, networks, and (with -v) volumes.Example: docker compose down

$docker compose down -v

Use case: Bring everything down INCLUDING volumes: full reset of local data.Example: docker compose down -v

$docker compose ps

Use case: List the status of compose services.Example: docker compose ps

$docker compose logs -f

Use case: Follow logs of all services: or specify one: docker compose logs -f web.Example: docker compose logs -f

$docker compose exec <service> <cmd>

Use case: Run a command in a running service container.Example: docker compose exec web node -v

$docker compose exec <service> /bin/sh

Use case: Open a shell in a service container.Example: docker compose exec db /bin/sh

$docker compose restart <service>

Use case: Restart one service without touching the others.Example: docker compose restart web

$docker compose pull

Use case: Pull the latest images for all services.Example: docker compose pull

$docker compose build

Use case: Build images for all services without starting them.Example: docker compose build

$docker compose config

Use case: Validate and print the resolved compose configuration: catch YAML errors.Example: docker compose config

$docker compose top

Use case: Show running processes of compose services.Example: docker compose top

$docker compose scale worker=3

Use case: Scale a service to N replicas (classic compose).Example: docker compose scale worker=3

System & Cleanup10

$docker system df

Use case: Show disk usage of images, containers, volumes, and build cache.Example: docker system df

$docker system prune

Use case: Remove stopped containers, unused networks, and dangling images.Example: docker system prune

$docker system prune -a --volumes

Use case: Remove everything unused: images, cache, volumes. Full cleanup.Example: docker system prune -a --volumes

$docker builder prune

Use case: Clean the build cache: often the biggest disk hog.Example: docker builder prune

$docker info

Use case: Show system-wide Docker info: storage driver, resources, registries.Example: docker info

$docker version

Use case: Show client and server versions: check daemon connectivity.Example: docker version

$docker login

Use case: Authenticate to a registry before pushing.Example: docker login

$docker logout

Use case: Sign out of a registry.Example: docker logout

$docker context ls

Use case: List Docker contexts: switch between local and remote daemons.Example: docker context ls

$docker context use <name>

Use case: Switch to another Docker context, e.g. a remote server daemon.Example: docker context use my-server

Docker Cheatsheet

Every Docker command for building, running, and debugging containers: from image management to Compose, with syntax and real use cases.

Every command shows its real syntax followed by the use case: when and why you reach for it.

Image Management

docker images: List all local images with tags, sizes, and creation dates.

Example: docker images

docker image ls --filter "dangling=true": Find untagged (dangling) images: leftover build layers to clean.

Example: docker image ls --filter "dangling=true"

docker pull <image>: Download an image from a registry.

Example: docker pull node:22-alpine

docker build -t <name>:<tag> .: Build an image from a Dockerfile in the current directory and tag it.

Example: docker build -t myapp:1.0 .

docker build --no-cache -t <name> .: Rebuild ignoring the layer cache: force fresh RUN steps, e.g. after apt changes.

Example: docker build --no-cache -t myapp .

docker build --target <stage> -t <name> .: Build up to a specific multi-stage build target: dev stage for development images.

Example: docker build --target dev -t myapp:dev .

docker build --platform linux/amd64 -t <name> .: Build for a different platform: cross-compile images for ARM or x86 from any host.

Example: docker build --platform linux/amd64 -t myapp .

docker tag <image> <name>:<tag>: Add a new tag to an existing image: tag your build before pushing.

Example: docker tag myapp:1.0 myapp:latest

docker push <name>:<tag>: Upload an image to a registry (Docker Hub, GHCR, ECR...).

Example: docker push user/myapp:1.0

docker rmi <image>: Remove an image locally (stop its containers first).

Example: docker rmi myapp:1.0

docker image prune: Remove dangling images to reclaim disk.

Example: docker image prune

docker image prune -a: Remove ALL unused images, not just dangling ones.

Example: docker image prune -a

docker history <image>: Show the layer build history of an image: inspect what it contains.

Example: docker history myapp

docker inspect <image>: Show detailed image metadata as JSON: config, env, ports, labels.

Example: docker inspect myapp

docker save -o myapp.tar <image>: Export an image to a tar file: move images between machines without a registry.

Example: docker save -o myapp.tar myapp:1.0

docker load -i myapp.tar: Import an image from a tar file created with docker save.

Example: docker load -i myapp.tar

docker search <term>: Search Docker Hub for images.

Example: docker search postgres

docker manifest inspect <image>: Show which platforms an image supports: check ARM/amd64 availability.

Example: docker manifest inspect node:22

Container Lifecycle

docker run <image>: Create and start a container from an image.

Example: docker run nginx

docker run -it <image> /bin/bash: Run an interactive shell inside a container: explore the image or test commands.

Example: docker run -it ubuntu /bin/bash

docker run -d --name <name> <image>: Run a container in the background with a stable name.

Example: docker run -d --name web nginx

docker run -p 8080:80 <image>: Publish container port 80 to host port 8080: expose your app.

Example: docker run -p 8080:80 nginx

docker run -p 127.0.0.1:5432:5432 <image>: Bind a port to localhost only: keep databases private, never exposed publicly.

Example: docker run -p 127.0.0.1:5432:5432 postgres

docker run --env VAR=value <image>: Pass environment variables to the container.

Example: docker run --env NODE_ENV=production myapp

docker run --env-file .env <image>: Load environment variables from a file: keep secrets out of your shell history.

Example: docker run --env-file .env myapp

docker run --rm <image>: Automatically remove the container when it exits: perfect for one-off jobs.

Example: docker run --rm alpine echo hello

docker run --restart unless-stopped <image>: Auto-restart the container unless you explicitly stop it: for services.

Example: docker run -d --restart unless-stopped redis

docker run --memory 512m --cpus 1 <image>: Limit container memory and CPU: protect your host from runaway processes.

Example: docker run --memory 512m --cpus 1 myapp

docker run --network host <image>: Share the host network: no port mapping needed, container uses host ports directly.

Example: docker run --network host myapp

docker run --network <network> <image>: Attach the container to a custom network: container-to-container DNS by name.

Example: docker run --network app-net myapp

docker run --init <image>: Use tini as PID 1 so Ctrl+C and signals work properly: fixes zombie processes.

Example: docker run --init myapp

docker ps: List running containers.

Example: docker ps

docker ps -a: List ALL containers including stopped ones: find that container you lost.

Example: docker ps -a

docker ps --filter "status=exited": List only exited containers: cleanup candidates.

Example: docker ps --filter "status=exited"

docker start <name>: Restart an existing stopped container: keeps its state and filesystem.

Example: docker start web

docker stop <name>: Gracefully stop a container (SIGTERM, then SIGKILL after timeout).

Example: docker stop web

docker stop $(docker ps -q): Stop every running container at once.

Example: docker stop $(docker ps -q)

docker restart <name>: Stop and start a container: apply new restart policy or clear a stuck state.

Example: docker restart web

docker kill <name>: Immediately kill a container without grace period: for unresponsive ones.

Example: docker kill web

docker rm <name>: Delete a stopped container.

Example: docker rm web

docker rm -f $(docker ps -aq): Force-remove every container: nuclear reset of local containers.

Example: docker rm -f $(docker ps -aq)

docker container prune: Remove all stopped containers.

Example: docker container prune

docker top <name>: Show the processes running inside a container: like ps for containers.

Example: docker top web

docker stats: Live CPU/memory/network usage of running containers: find the hungry one.

Example: docker stats

docker cp <name>:/path /host/path: Copy files out of a container: pull logs or artifacts.

Example: docker cp web:/app/report.pdf ./report.pdf

docker cp /host/file <name>:/path: Copy files into a running container: quick config drops.

Example: docker cp config.json web:/app/config.json

docker wait <name>: Block until a container exits and print its exit code: scripting friendly.

Example: docker wait web

Debugging & Shell

docker logs <name>: Show container logs: the first stop when debugging.

Example: docker logs web

docker logs -f <name>: Follow logs live, like tail -f.

Example: docker logs -f web

docker logs --tail 100 <name>: Show only the last 100 lines: skip the startup noise.

Example: docker logs --tail 100 web

docker logs --since 5m <name>: Show logs from the last 5 minutes: after an incident.

Example: docker logs --since 5m web

docker exec -it <name> /bin/sh: Open an interactive shell inside a running container: alpine images need sh.

Example: docker exec -it web /bin/sh

docker exec <name> <cmd>: Run a single command inside a container: check env or run a script.

Example: docker exec web node -v

docker exec -it <name> /bin/bash -lc "command": Run a command with a login shell so PATH and env are fully loaded.

Example: docker exec -it web /bin/bash -lc "npm test"

docker attach <name>: Attach to a container's STDIN/STDOUT: watch an interactive process.

Example: docker attach web

docker port <name>: Show the published port mappings of a container.

Example: docker port web

docker diff <name>: Show files changed inside a container since it started: find unexpected writes.

Example: docker diff web

docker events: Stream all container/image events in real time: observe lifecycle.

Example: docker events

docker system events --filter "container=web": Watch events for a single container: debug restarts.

Example: docker system events --filter "container=web"

Volumes & Networks

docker volume create <name>: Create a named volume for persistent data.

Example: docker volume create pgdata

docker run -v <name>:/data <image>: Mount a named volume at /data: survives container removal.

Example: docker run -v pgdata:/var/lib/postgresql/data postgres

docker run -v $(pwd):/app <image>: Mount the current directory into the container: live development without rebuilding.

Example: docker run -v $(pwd):/app node:22 node app.js

docker run -v /host/path:/container/path:ro <image>: Mount a host path read-only: share config that must not change.

Example: docker run -v /etc/ssl:/certs:ro myapp

docker run --tmpfs /tmp <image>: Mount an ephemeral in-memory tmpfs: fast scratch space, nothing persists.

Example: docker run --tmpfs /tmp myapp

docker volume ls: List all volumes.

Example: docker volume ls

docker volume inspect <name>: Show volume details: mountpoint on the host.

Example: docker volume inspect pgdata

docker volume rm <name>: Delete a volume: permanently removes its data.

Example: docker volume rm pgdata

docker volume prune: Remove all volumes not used by any container: be careful, data is gone.

Example: docker volume prune

docker network create <name>: Create a user-defined bridge network: containers get DNS by name.

Example: docker network create app-net

docker network ls: List all networks.

Example: docker network ls

docker network connect <net> <container>: Attach a running container to another network: connect app to database.

Example: docker network connect app-net web

docker network disconnect <net> <container>: Detach a container from a network.

Example: docker network disconnect app-net web

docker network inspect <net>: Show a network's containers and configuration.

Example: docker network inspect app-net

docker network prune: Remove unused networks.

Example: docker network prune

Docker Compose

docker compose up: Create and start all services defined in docker-compose.yml (foreground).

Example: docker compose up

docker compose up -d: Start services in the background.

Example: docker compose up -d

docker compose up --build: Rebuild images before starting: apply Dockerfile changes.

Example: docker compose up --build

docker compose -f docker-compose.prod.yml up -d: Use a specific compose file: env-specific overrides.

Example: docker compose -f docker-compose.prod.yml up -d

docker compose down: Stop and remove services, networks, and (with -v) volumes.

Example: docker compose down

docker compose down -v: Bring everything down INCLUDING volumes: full reset of local data.

Example: docker compose down -v

docker compose ps: List the status of compose services.

Example: docker compose ps

docker compose logs -f: Follow logs of all services: or specify one: docker compose logs -f web.

Example: docker compose logs -f

docker compose exec <service> <cmd>: Run a command in a running service container.

Example: docker compose exec web node -v

docker compose exec <service> /bin/sh: Open a shell in a service container.

Example: docker compose exec db /bin/sh

docker compose restart <service>: Restart one service without touching the others.

Example: docker compose restart web

docker compose pull: Pull the latest images for all services.

Example: docker compose pull

docker compose build: Build images for all services without starting them.

Example: docker compose build

docker compose config: Validate and print the resolved compose configuration: catch YAML errors.

Example: docker compose config

docker compose top: Show running processes of compose services.

Example: docker compose top

docker compose scale worker=3: Scale a service to N replicas (classic compose).

Example: docker compose scale worker=3

System & Cleanup

docker system df: Show disk usage of images, containers, volumes, and build cache.

Example: docker system df

docker system prune: Remove stopped containers, unused networks, and dangling images.

Example: docker system prune

docker system prune -a --volumes: Remove everything unused: images, cache, volumes. Full cleanup.

Example: docker system prune -a --volumes

docker builder prune: Clean the build cache: often the biggest disk hog.

Example: docker builder prune

docker info: Show system-wide Docker info: storage driver, resources, registries.

Example: docker info

docker version: Show client and server versions: check daemon connectivity.

Example: docker version

docker login: Authenticate to a registry before pushing.

Example: docker login

docker logout: Sign out of a registry.

Example: docker logout

docker context ls: List Docker contexts: switch between local and remote daemons.

Example: docker context ls

docker context use <name>: Switch to another Docker context, e.g. a remote server daemon.

Example: docker context use my-server

Frequently asked questions

What is the difference between docker run and docker start?

docker run creates and starts a new container from an image with its configuration. docker start restarts an existing, stopped container with its saved state. Use run for new containers and start for reusing old ones.

How do I remove unused Docker resources?

Run docker system prune -a to remove all stopped containers, unused networks, and dangling images. Add --volumes to also remove unused volumes. Use docker image prune for images only.

How do I access a running container?

Use docker exec -it <container> bash (or sh) to open an interactive shell inside a running container. For logs use docker logs -f <container>, and docker inspect <container> to view low-level configuration.

What is the difference between docker build and docker compose?

docker build creates an image from a Dockerfile. docker compose defines and runs multi-container applications from a docker-compose.yml file, building, networking, and starting services together.