memory/center

◐/

+ CAPTURE

⌂◐◎⌁

BROWSE108 notes

Filter notes/

Enter opens the top match. Use /regex/i for patterns.

▸Networking & Storage2

▾Dockerfile3

Dockerfile best practices

Dockerfile instructions

Fix bugs or Add features docker system prune curl API testing: repeat 100×, load & timing Install .deb files & alternative install methods (Ubuntu)

⌂Home ◐Search◎Graph

Docker/Dockerfile/Dockerfile best practices

ChecklistUpdated 3 weeks ago

Dockerfile best practices

A pre-merge checklist for Dockerfiles: small, fast-building, secure and reproducible images.

#docker #dockerfile #security

Checklist

STEP 1 OF 12

Pin the base image version (node:20.11-alpine, not node:latest)

Example

Combining steps and cleaning up in one layer keeps the cache out of the image.

Good vs bad RUN

DOCKERFILE

1# Bad: 3 layers, apt cache stays in the image

2RUN apt-get update

3RUN apt-get install -y curl

4RUN rm -rf /var/lib/apt/lists/*

6# Good: 1 layer, cache removed before the layer is saved

7RUN apt-get update \

8 && apt-get install -y --no-install-recommends curl \

9 && rm -rf /var/lib/apt/lists/*

On this page

Checklist Example

Referenced by0

Leads to

History

3 weeksEdited "Dockerfile best practices"

Docker/Dockerfile/Dockerfile best practices

ChecklistUpdated 3 weeks ago

Dockerfile best practices

A pre-merge checklist for Dockerfiles: small, fast-building, secure and reproducible images.

#docker #dockerfile #security

Checklist

STEP 1 OF 12

Pin the base image version (node:20.11-alpine, not node:latest)

Example

Combining steps and cleaning up in one layer keeps the cache out of the image.

Good vs bad RUN

DOCKERFILE

1# Bad: 3 layers, apt cache stays in the image

2RUN apt-get update

3RUN apt-get install -y curl

4RUN rm -rf /var/lib/apt/lists/*

6# Good: 1 layer, cache removed before the layer is saved

7RUN apt-get update \

8 && apt-get install -y --no-install-recommends curl \

9 && rm -rf /var/lib/apt/lists/*

On this page

Checklist Example

Referenced by0

Leads to

History

3 weeksEdited "Dockerfile best practices"