Docker multi-stage builds are a game-changer for anyone looking to optimize their container images. If you've ever struggled with bloated production images filled with build tools, compilers, and unnecessary source code, this approach solves that problem entirely.
What is a Multi-Stage Build?
Before multi-stage builds became standard in Docker 17.05, developers had to maintain complex chains of Bash scripts or separate
A multi-stage build allows you to use multiple
Practical Example: A Go Application
Let's look at a practical example using a Go application. Go binaries need to be compiled, but the final production container only needs the compiled binary itself, not the entire Go SDK.
Breaking Down the Syntax
1.
2.
Key Benefits
What is a Multi-Stage Build?
Before multi-stage builds became standard in Docker 17.05, developers had to maintain complex chains of Bash scripts or separate
Dockerfile.build and Dockerfile.production files.A multi-stage build allows you to use multiple
FROM instructions in a single Dockerfile. Each FROM instruction starts a *new stage* of the build with a fresh base image. The crucial feature here is that you can selectively copy artifacts from one stage to another, leaving behind everything you don't need in the final image.Practical Example: A Go Application
Let's look at a practical example using a Go application. Go binaries need to be compiled, but the final production container only needs the compiled binary itself, not the entire Go SDK.
Code:
# Stage 1: Build the binary
FROM golang:1.21-alpine AS builder
WORKDIR /app
# Copy dependency files
COPY go.mod go.sum ./
RUN go mod download
# Copy source code
COPY . .
# Build the application statically
RUN CGO_ENABLED=0 GOOS=linux go build -o myapp .
# Stage 2: Create the minimal production image
FROM alpine:latest
WORKDIR /root/
# Copy only the compiled binary from the builder stage
COPY --from=builder /app/myapp .
# Expose port and set entrypoint
EXPOSE 8080
CMD ["./myapp"]Breaking Down the Syntax
1.
AS builder: We name the first stage builder. This acts as a reference point for later stages.2.
COPY --from=builder: This is where the magic happens. Instead of copying files from your local machine, Docker pulls the artifact directly from the filesystem of the stage named builder.Key Benefits
- Drastic Size Reduction: By dropping compilers, SDKs, and intermediate cache files, your production image footprint shrinks dramatically. A Node.js or Go image can easily drop from over 1GB to under 50MB.
- Enhanced Security: Fewer packages and tools installed in the final container mean a significantly smaller attack surface.
- Simplified Maintenance: No more juggling multiple Dockerfiles for development and production. Everything lives in one clean, readable file.
