Docker BuildKit TLS timeout after VPS reboot during docker compose build
Diagnosis
BuildKit always checks metadata from Docker Hub even with cached images. TLS unstable after reboot.
Fix
docker pull base-image first, then docker compose build. Pull uses standard client with better retry handling.