Docker Compose

Docker Compose at a glance

Docker Compose is the widely used tool for defining and running multi-container applications from a declarative YAML file. It ships as part of the Docker tooling with regular releases; the modern Compose V2 is a plugin invoked as "docker compose".

For admins keeping Compose current usually rides along with updating Docker Engine and the CLI plugin. The bigger version story is your images: Compose only orchestrates them, so the security of a stack depends on keeping the referenced image tags current and rebuilt — pin digests for reproducibility and update them deliberately. Compose files often reference secrets and ports — keep secrets out of the file (use env files or a secrets mechanism) and don't expose management ports. After updating Compose or images, recreate and verify the stack. Track Docker's release notes for behaviour changes.