Complete procedures with a way back.

Resolve Docker container name is already in use conflicts by identifying the existing container and owner, preserving writable and mounted data, and choosing restart, rename, scoped removal, or corrected Compose project naming without deleting the wrong workload.

Diagnose Docker failed to resolve reference and manifest unknown errors by proving the exact image name, registry path, authentication boundary, tag or digest, daemon network path, and target platform before retrying a pull or deployment.

Integrate NVIDIA GPUs with Docker from a pinned driver/toolkit/CUDA matrix, assign devices by UUID or CDI, harden non-root workloads, monitor hardware with DCGM, and rehearse daemon-aware upgrades and rollback.

Run authenticated local AI behind TLS with private Ollama networking, persistent storage, controlled models, staged updates and tested backup/restore.

Separate a stopped daemon, wrong Docker context, rootless socket, stale environment override, and real Unix-socket authorization before changing group membership.

Attribute ENOSPC to host blocks, inodes, Docker layers, build cache, writable containers, volumes, or logs before selecting any cleanup.

Package a small web service with a non-root image, healthchecks, an internal data network, persistent storage, reproducible configuration, backup, update, and rollback.

Install from Docker's signed repository, limit daemon exposure, bound logs, and document privilege boundaries.