What are Docker security best practices?

Docker security best practices include: using official or trusted base images, regularly updating images to fix security vulnerabilities, avoiding storing sensitive information in images (use environment variables or secrets), running containers as non-root users, limiting container resource usage, using the --read-only flag to make container file systems read-only, using Docker Content Trust to verify image signatures, limiting container capabilities (using --cap-drop and --cap-add), using AppArmor or SELinux for enhanced security isolation, and regularly auditing and monitoring containers.