Dockerfile

From NovaOrdis Knowledge Base
Revision as of 01:55, 1 January 2018 by Ovidiu (talk | contribs) (→‎WORKDIR)
Jump to navigation Jump to search

External

Internal

Overview

A Dockerfile is a plain text file that defines how a container should look at build time. It contains all the steps that are required to create the image.

Each line in the Dockerfile generates a new layer in the image. Multiple commands can be combined on a single line, to reduce the number of layers.

The Dockerfile is used as the argument of the docker build command.

Examples

Syntax

<instruction> <arguments>

Example

Dockerfile Example

Instructions

Instructions are also known as "directives", and they are part of a DSL.

FROM

https://docs.docker.com/engine/reference/builder/#from

A valid Dockerfile must start with a FROM instruction (ARG is the only instruction that can precede FROM). FROM specifies the base image upon which other layers are built.

FROM node:0.10

If the only Dockerfile instruction is FROM, the build command simply downloads the base image into the local registry, listing the image's repository and tag.

FROM can appear multiple times in a Dockerfile.

ARG

https://docs.docker.com/engine/reference/builder/#arg

COPY

https://docs.docker.com/engine/reference/builder/#copy
COPY <src> <dest>

The COPY instruction copies new files or directories from <src> and adds them to the filesystem of the container at the path <dest>. The source paths are relative to the build context.

ADD

https://docs.docker.com/engine/reference/builder/#add

Copies files from the local filesystem into the image.

ADD /something/something_else.conf $MY_PATH

CMD

Defines the command that launches the process to be executed in the container.

CMD [ "somehting", "-arg" ]

See:

Entrypoint

ENTRYPOINT

Entrypoint

USER

The user to run a container's processes as.

Also see Docker Security

ENV

Declares environment variable accessible to the processes in the container:

ENV SOMETHING "something else"

RUN

https://docs.docker.com/engine/reference/builder/#run

The RUN instruction will execute any command in a new layer on top of the current image, and commit results. The resulted committed image will e sued for the next step in the Dockerfile. Layering RUN instructions and generating commits conforms to the core concepts of Docker where commits are cheap and containers can be created from any point in an image’s history, much like source control.

It has two forms:

  • Shell form:
RUN <command>
  • Exec form:
RUN ["executable", "param1", "param2", ...]

Running commands like yum in the Dockerfile is discouraged because it increases the time it takes for the build to finish. The alternative is to use base images that already have these updates applied.

WORKDIR

https://docs.docker.com/engine/reference/builder/#workdir

Changes the working directory within the context of the image being built, for the rest of the build instructions.

MAINTAINER

LABEL

Applies a label to the image.

LABEL "something"="something else" "other label"="some other content"

VOLUME

https://docs.docker.com/engine/reference/builder/#volume

The VOLUME instruction creates a mount point inside the container and marks it as holding an externally mounted volume from the native host. The docker run command initializes the newly created volume with any data that exists at the specified location in the base image. At runtime, the storage driver will be bypassed when written data into the volume, so the I/O will be performed at native speeds.

VOLUME /data
VOLUME [ "/data" ]

The native host directory cannot be declared in Dockerfile: it is by its nature host-dependent and it presence cannot be guaranteed, so to preserve portability, the native host mount point must be specified when creating the container with docker run --mount. The actual location of the volume on the native host is a directory whose path is returned by the corresponding "Source" entry in output of:

docker inspect -f '{{json .Mounts}}' <container-id>

For more details about data volumes see: