Automation & Ops ✓ NVIDIA · Official

DOCA Container Deployment

Deploy, validate, and troubleshoot DOCA service containers on NVIDIA BlueField.

52/ 100
Use with care

Useful, but reliability, evidence or controls still have material gaps.

See how it was scored ↓
Works as-is in
Codex · Claude Code
Stars
★ 3.8k
Last updated
today
License
Apache-2.0
bluefielddocacontainer-deploymentkubelet
+2static-podtroubleshooting

What does this skill do, and when should you use it?

This skill supports external operators and platform teams deploying Argus, DMS, Firefly, or UROM service containers on BlueField. It covers the shared runtime pattern: standalone kubelet on the BlueField Arm watches a static-pod manifests directory and schedules containers from dropped YAML pod specs. Workflows span configure, build, modify, run, test, and debug, with smoke validation required before bulk workload. It excludes DOCA installation, service-specific configuration schemas, library APIs, and full Kubernetes cluster operations.

Guides operators to drop YAML pod specs into the documented static-pod manifests directory; inspect kubelet pod status, container logs, ENTRYPOINT logs, and service-side liveness; classify failures across pod-spec, scheduling, image-pull, runtime, mount, network, version, and host layers; verify that a pod reaches Running, produces clean ENTRYPOINT logs, and answers a basic liveness probe before broader deployment; and route restart loops, missing mounts, network-policy blocks, and host-firewall issues to the appropriate diagnostic layer.

Good fit
  • A platform team has DOCA installed on the BlueField Arm and needs to deploy an Argus, DMS, Firefly, or UROM service container.
  • An operator has dropped a pod YAML file but the pod remains Pending and needs cross-cutting scheduling diagnosis.
  • A container is Running while the service inside is not ready, requiring log and liveness validation.
  • A deployment encounters ImagePullBackOff, CrashLoopBackOff, missing volume mounts, or network blocking.
  • A team needs to run multiple supported DOCA services on one BlueField and validate them before workload expansion.

How do you install this skill?

Before you use it
  • Do not generate or execute pod specs, images, paths, kubelet flags, or privileged settings from this skill alone; verify them against the official guide for the target BFB/DOCA version.
  • Before production deployment on a BlueField, establish explicit user confirmation, least privilege, the impact of hostNetwork/privileged access and mounts, a maintenance window, and a recoverable previous configuration.
  • NGC and official documentation may be network- or region-constrained; the supplied material provides no mainland-China reachability or offline-image plan.
  • Resolve the license inconsistency and add author, version, changelog, examples, and reproducible tests.
Before you start
Your agent needs
  • Network access
  • Local filesystem
Install first
  • NVIDIA BlueField target
  • DOCA installed on the Arm side
  • kubelet standalone
  • container runtime
  • BlueField OS image
  • NGC image-pull reachability

Install the individual skill with the NVIDIA skills CLI:

npx skills add nvidia/skills --skill doca-container-deployment --yes

The README states that the npx-based CLI prompts for the installation destination; cloning the repository or manually copying skill folders is not required.

Generic route: install into Claude Code manually (macOS / Linux)
tmp="$(mktemp -d)"
git clone --depth 1 https://github.com/NVIDIA/skills.git "$tmp"
mkdir -p ~/.claude/skills
cp -R "$tmp/skills/doca-container-deployment" ~/.claude/skills/
rm -rf "$tmp"

Generated from the source repository and skill path; it copies only this skill's folder. If the author's install steps above differ, follow those first. To scope it to one project, replace ~/.claude/skills with that project's .claude/skills.

How do you use this skill?

Try saying

Once installed, send your agent any of these to trigger it:

  • How do I run my built service on the BlueField?
  • My pod is stuck in ImagePullBackOff
  • Can I have DMS and Firefly on the same BlueField?

Ask an agent with the skill loaded a concrete deployment question such as "How do I run my built service on the BlueField?", "My pod is stuck in ImagePullBackOff", or "Can I have DMS and Firefly on the same BlueField?" If the container-versus-bare-metal decision has not been made, route first through doca-setup's recognize workflow. Once on the container path, read TASKS.md and consult CAPABILITIES.md for the runtime contract and safety policy.

What are this skill's strengths and limitations?

Pros
  • Covers the shared deployment runtime for four supported DOCA services.
  • Provides a layered observability model from pod status through service readiness.
  • Includes an explicit smoke-before-bulk safety policy and eight-layer error taxonomy.
  • Clearly separates container deployment from DOCA setup, service-specific configuration, and full Kubernetes operations.
Limitations
  • It is not a general Kubernetes tutorial and does not cover a Kubernetes control plane.
  • It does not install DOCA or document service-specific configuration schemas.
  • It deliberately avoids re-documenting kubelet flags, pod-spec field names, and image tags; those details depend on companion documentation.
  • Validation assumes an existing DOCA installation, standalone kubelet, container runtime, host permissions, and image-pull connectivity.

How does this skill compare with similar options?

Side by side with related skills; every score comes from the same FSRS standard.

Skill FS score Stars Last updated License
DOCA Container Deployment this page ✓ NVIDIA · Official 52 · Use with care ★ 3.8k today Apache-2.0
DOCA Argus Runtime Security Operations ✓ NVIDIA · Official 50 · Use with care ★ 3.8k today Apache-2.0
DOCA Socket Relay ✓ NVIDIA · Official 49 · Use with care ★ 3.8k today Apache-2.0
DOCA BlueField Bare-Metal Deployment ✓ NVIDIA · Official 53 · Use with care ★ 3.8k today Apache-2.0
DOCA Capabilities Inspector ✓ NVIDIA · Official 56 · Use with care ★ 3.8k today Apache-2.0

Compared with doca-bare-metal-deployment, this skill targets packaged DOCA service containers managed by standalone kubelet, while the sibling skill targets directly launched DOCA-linked application binaries. Compared with full Kubernetes operations, it covers only the BlueField standalone-kubelet pattern without a cluster control plane.

How did FollowSkills review this skill?

FollowSkills review · FSRS-2.0
Use with care
52/ 100 5-point scale 2.6 / 5
The upstream repository has new commits since this review. The score still applies to the reviewed revision shown and may not cover the latest changes.
1Trust17 / 25 · 3.4/5

The documents require authoritative-guide lookup, prohibit inventing images or fields, and define smoke-before-bulk, rollback baselines, out-of-band access, and layered diagnosis. They do not establish concrete least-privilege rules, user-confirmation gates, or safety constraints for high-impact settings such as privileged access or host networking, and they depend on external NGC pulls; 8 points are deducted.

2Reliability8 / 20 · 2.0/5

Loading order, preconditions, three-layer observation, and the eight-layer fault taxonomy are generally coherent, with explicit guidance to diagnose before restarting. However, key commands, paths, and fields are delegated to external guides, service coverage is inconsistent across files, and static review cannot reproduce key paths; 12 points are deducted, yielding 8 within the static ceiling.

3Adaptability9 / 15 · 3.0/5

The audience, trigger examples, container-versus-bare-metal boundary, and non-goals are clearly stated. Chinese-language guidance is absent, no mainland-China fallback is described for potentially restricted NGC or documentation access, and built workloads still require additional routing; 6 points are deducted.

4Convention8 / 15 · 2.7/5

The material has layered information architecture, cross-references, workflows, and limitation disclosures, and NVIDIA ownership plus repository synchronization are indicated. However, metadata says NOASSERTION while the skill card states Apache 2.0 AND CC-BY-4.0, author metadata is missing, version/change governance is incomplete, and the benchmark reports missing Instructions/Examples; 7 points are deducted.

5Effectiveness6 / 15 · 2.0/5

The skill supplies deployment decisions, precondition checks, smoke validation, and layered troubleshooting that can reduce generic Kubernetes misguidance. It is nevertheless a thin loader without executable commands, concrete paths, pod specs, or representative complete outputs; core completion depends on omitted external guides and other skills. 9 points are deducted, yielding 6 within the static ceiling.

6Verifiability4 / 10 · 2.0/5

There is substantial internal traceability among the supplied files and a benchmark report. The benchmark dataset is unavailable, no committed coverage tests or third-party execution evidence are supplied, and the referenced external-guide content is absent from the evidence; 6 points are deducted, yielding 4 within the static ceiling.

1 2 3 4 5 6

Open a dimension to read why it scored that way

Reviewed Jul 20, 2026 Reviewed revision 55f18499943e Review evidence[1][2][3][4][5][6][7][8][9]

Evidence confidence:Low — Mostly static review, author material or a limited demo; useful for discovery, not high-risk decisions.

See the full review method →

FAQ

Do I need DOCA installed before installing the skill?
DOCA is not required merely to read the skill, but its validation steps require DOCA on the target BlueField Arm. An uninstalled target should be routed through doca-setup first.
Does this skill configure DMS or Firefly service parameters?
No. Service-specific configuration schemas, paired-workload contracts, and health definitions belong to the corresponding per-service skills.
What should I do when a pod repeatedly restarts?
Identify and clear the root cause using the layered taxonomy before allowing kubelet to keep restarting the pod, then repeat the smoke validation.

More skills from this repository

All from NVIDIA/skills

Dev & Engineering ✓ NVIDIA · Official

DOCA Environment Setup

Verify, prepare, and troubleshoot the DOCA environment while routing workloads to the right deployment path.

★ 3.8k FS 57 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Argus Runtime Security Operations

Deploy Argus on BlueField to detect runtime threats and forward findings to an existing SIEM.

★ 3.8k FS 50 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Socket Relay

Bridge an existing socket application to a BlueField DPU without rewriting it

★ 3.8k FS 49 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA BlueField Bare-Metal Deployment

Run, supervise, and troubleshoot DOCA binaries directly on BlueField hardware.

★ 3.8k FS 53 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Capabilities Inspector

Inspect what DOCA can see on a host through a read-only device and capability CLI.

★ 3.8k FS 56 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA PCC Diagnostic Counters

Read fixed firmware and hardware PCC congestion diagnostics on ConnectX and BlueField devices.

★ 3.8k FS 56 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Structured Tools Contract

A governed fallback contract for consolidating DOCA environment, device, capability, validation, and host-DPU state data.

★ 3.8k FS 55 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Telemetry Exporter Development

Guides DOCA applications in defining, emitting, and debugging structured telemetry for external consumers.

★ 3.8k FS 55 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA Upgrade Control

Safely gate DOCA upgrades and rollbacks with explicit confirmation.

★ 3.8k FS 55 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA CollectX Telemetry Deployment

Deploy, operate, and debug CollectX telemetry collectors so counters reach downstream exporters.

★ 3.8k FS 54 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Programming Guide

Guides developers through building, testing, and debugging library-agnostic DOCA applications from shipped samples.

★ 3.8k FS 54 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Version Consistency Assistant

Verifies DOCA version sources and host–BlueField consistency while diagnosing build-versus-runtime drift.

★ 3.8k FS 53 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA DPA High-Level Tracer

Capture and decode BlueField DPA programming events to diagnose kernel behavior, communication latency, and trace failures.

★ 3.8k FS 50 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA UROM Service Operations

Deploy and troubleshoot the DOCA UROM service container on BlueField Arm.

★ 3.8k FS 45 Not recommended today
Automation & Ops ✓ NVIDIA · Official

DOCA Firefly Time-Synchronization Operations

Operate, configure, and troubleshoot DOCA Firefly PTP time synchronization on BlueField.

★ 3.8k FS 53 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA Hardware Telemetry Counter Reader

Guides developers in reading per-domain hardware counters from BlueField and ConnectX devices.

★ 3.8k FS 60 Recommended today
Dev & Engineering ✓ NVIDIA · Official

DOCA Flow DPA Performance

Guides defensible measurement of DOCA Flow rule-update and disable rates on DPA-capable NVIDIA hardware.

★ 3.8k FS 58 Recommended today
Automation & Ops ✓ NVIDIA · Official

NVIDIA AI-Q Deployment

Deploy, verify, and operate NVIDIA AI-Q Blueprint infrastructure.

★ 3.8k FS 57 Use with care today
Dev & Engineering ✓ NVIDIA · Official

DOCA AES-GCM Acceleration

Configure, validate, and debug DOCA AES-GCM offload on BlueField DPUs and ConnectX NICs.

★ 3.8k FS 57 Use with care today
Automation & Ops ✓ NVIDIA · Official

DOCA BlueField-3 Bring-Up

Guides operators through BF3 day-one bring-up, recovery, RShim/BFB provisioning, and installation validation.

★ 3.8k FS 56 Use with care today

Related skills