Bestpractices in docker

Docker best practices: use small base images (Alpine), multi-stage builds, .dockerignore file, don't run as root, minimize layers, use specific image tags (not 'latest'), and scan for vulnerabilities.