Volume Reference Counts Help Detect Orphaned Docker State
Old Docker volumes can consume storage after services are removed, and their names alone do not always reveal whether anything still depends on them.
inventory
Docker Security Posture Belongs in Monitoring
Privileged containers, Docker socket mounts, root users and published ports are configuration facts that can silently drift after deployment.
A Five-Minute Cache Was the Right Place for Expensive Docker Storage Inventory
Not every metric needs to be collected at the same cadence; expensive inventory can be cached without weakening real-time health signals.
External Runtimes Still Need an Owner Even If They Live in Another Repository
Repository boundaries should not become operational blind spots on a shared production host.
A Post-Deploy Inventory Snapshot Is Forensic Evidence
Recording containers, ports and revisions after deployment gives future incident response a known-good comparison point.
A Source-Ownership Manifest Solved the 'Who Owns This Container?' Problem
Seeing a service in Portainer does not tell you which repository, runbook or backup path can recreate it.