Why Multi-stage builds concept in Docker? - Purpose & Use Cases

The Big Idea

What if you could build your app and deliver a tiny, clean image without messy manual cleanup?

The Scenario

Imagine you want to create a small, fast Docker image for your app, but your app needs many tools to build. You first install all tools, build the app, then try to remove the tools manually before sharing the image.

The Problem

This manual way is slow and messy. You might forget to remove some tools, making the image big and slow to download. Also, cleaning up by hand is error-prone and wastes time.

The Solution

Multi-stage builds let you use one Dockerfile to build your app in one stage with all tools, then copy only the final app to a clean, small image in the next stage. This keeps images tiny and build steps clear.

Before vs After

✗ Before

FROM ubuntu
RUN apt-get update && apt-get install -y build-essential
RUN build-app
RUN apt-get remove -y build-essential
CMD ./app

✓ After

FROM ubuntu AS build
RUN apt-get update && apt-get install -y build-essential
RUN build-app
FROM scratch
COPY --from=build /app /app
CMD ["/app"]

What It Enables

It enables creating small, efficient Docker images by separating build and runtime environments cleanly.

Real Life Example

Developers building a Go app use multi-stage builds to compile the app with all tools, then produce a tiny final image with just the compiled binary, perfect for fast deployment.

Key Takeaways

Manual cleanup of build tools is slow and error-prone.

Multi-stage builds separate build and runtime steps in one Dockerfile.

Final images become smaller, faster, and easier to manage.

Practice

1. What is the main purpose of using multi-stage builds in Docker?

easy

A. To automatically update Docker images from the internet

B. To run multiple containers simultaneously

C. To create smaller and cleaner Docker images by separating build and runtime stages

D. To speed up the Docker daemon startup

Solution

1. Step 1: Understand multi-stage build concept

   Multi-stage builds allow splitting the Dockerfile into multiple stages, separating build tools from the final runtime environment.

2. Step 2: Identify the benefit

   This separation helps reduce image size by excluding unnecessary build dependencies from the final image.

3. Final Answer:

   To create smaller and cleaner Docker images by separating build and runtime stages -> Option C

4. Quick Check:

   Multi-stage builds = smaller images [OK]

Hint: Remember: multi-stage builds reduce image size by separating stages [OK]

Common Mistakes:

• Confusing multi-stage builds with running multiple containers
• Thinking it speeds up Docker daemon startup
• Believing it auto-updates images

2. Which of the following is the correct syntax to name a build stage in a Dockerfile?

easy

A. BUILD node AS builder

B. FROM node AS builder

C. STAGE node builder

D. COPY node AS builder

Solution

1. Step 1: Recall Dockerfile syntax for naming stages

   The correct syntax to name a build stage is using FROM <image> AS <stage-name>.

2. Step 2: Match options with syntax

   FROM node AS builder matches this syntax exactly, while others use invalid keywords.

3. Final Answer:

   FROM node AS builder -> Option B

4. Quick Check:

   Stage naming uses FROM ... AS ... [OK]

Hint: Use FROM ... AS ... to name stages in Dockerfile [OK]

Common Mistakes:

• Using BUILD or STAGE keywords instead of FROM
• Trying to name stages with COPY command
• Missing AS keyword

3. Given this Dockerfile snippet, what will be the size impact on the final image?

FROM golang:1.20 AS builder
WORKDIR /app
COPY . .
RUN go build -o myapp

FROM alpine:latest
COPY --from=builder /app/myapp /usr/local/bin/myapp
CMD ["myapp"]

medium

A. The final image will be small because only the built binary is copied from the builder stage

B. The final image will be large because it includes the entire Go build environment

C. The final image will be empty because no files are copied

D. The final image will contain source code but no binary

Solution

1. Step 1: Analyze the multi-stage build steps

   The first stage builds the Go binary using the full Go environment. The second stage uses a minimal Alpine image and copies only the binary from the builder stage.

2. Step 2: Understand image size impact

   Because only the binary is copied, the final image excludes the Go build tools and source code, making it small.

3. Final Answer:

   The final image will be small because only the built binary is copied from the builder stage -> Option A

4. Quick Check:

   Copying only binary = smaller final image [OK]

Hint: Copy only needed files from builder to reduce image size [OK]

Common Mistakes:

• Assuming the entire build environment is included in final image
• Thinking no files are copied
• Believing source code is copied without binary

4. Identify the error in this Dockerfile snippet using multi-stage builds:

FROM node:18 AS build
WORKDIR /app
COPY package.json .
RUN npm install
COPY . .
RUN npm run build

FROM nginx:alpine
COPY --from=build /app/dist /usr/share/nginx/html
RUN npm install
CMD ["nginx", "-g", "daemon off;"]

medium

A. CMD syntax is incorrect

B. The first stage misses the AS keyword for naming

C. COPY command syntax is invalid

D. The second stage incorrectly runs 'npm install' which is not available in nginx image

Solution

1. Step 1: Review commands in each stage

   The first stage builds the app correctly. The second stage uses nginx image, which does not have npm installed.

2. Step 2: Identify invalid command in second stage

   Running 'npm install' in the nginx stage will cause an error because npm is not present.

3. Final Answer:

   The second stage incorrectly runs 'npm install' which is not available in nginx image -> Option D

4. Quick Check:

   npm commands require node environment, not nginx [OK]

Hint: Check if commands match the base image environment [OK]

Common Mistakes:

• Assuming npm works in nginx image
• Missing AS keyword (actually present here)
• Misreading COPY syntax
• Confusing CMD syntax

5. You want to build a Docker image for a Python app using multi-stage builds. The first stage installs dependencies and runs tests. The second stage copies only the app and dependencies for runtime. Which Dockerfile snippet correctly implements this?

hard

A. FROM python:3.12 AS builder
WORKDIR /app
COPY requirements.txt .
RUN python -m venv venv && venv/bin/pip install -r requirements.txt
COPY . .
RUN venv/bin/pytest

FROM python:3.12-slim
WORKDIR /app
COPY --from=builder /app /app
CMD ["venv/bin/python", "app.py"]

B. FROM python:3.12
WORKDIR /app
COPY requirements.txt .
RUN pip install -r requirements.txt
COPY . .
RUN pytest
CMD ["python", "app.py"]

C. FROM python:3.12 AS builder
WORKDIR /app
COPY . .
RUN pytest

FROM python:3.12-slim
WORKDIR /app
COPY --from=builder /app /app
RUN pip install -r requirements.txt
CMD ["python", "app.py"]

D. FROM python:3.12 AS builder
WORKDIR /app
COPY requirements.txt .
RUN pip install -r requirements.txt
COPY . .
RUN pytest

FROM python:3.12-slim
WORKDIR /app
COPY --from=builder /app /app
RUN pip install -r requirements.txt
CMD ["python", "app.py"]

Solution

1. Step 1: Understand multi-stage build goals

   The first stage installs dependencies and runs tests. The second stage copies the app and dependencies for runtime only.

2. Step 2: Analyze each option

   FROM python:3.12 AS builder
   WORKDIR /app
   COPY requirements.txt .
   RUN python -m venv venv && venv/bin/pip install -r requirements.txt
   COPY . .
   RUN venv/bin/pytest
   
   FROM python:3.12-slim
   WORKDIR /app
   COPY --from=builder /app /app
   CMD ["venv/bin/python", "app.py"]

   installs dependencies in a venv and tests in builder, then copies all of /app (including venv) to slim image without reinstalling.

   FROM python:3.12
   WORKDIR /app
   COPY requirements.txt .
   RUN pip install -r requirements.txt
   COPY . .
   RUN pytest
   CMD ["python", "app.py"]

   has no multi-stage build.

   FROM python:3.12 AS builder
   WORKDIR /app
   COPY . .
   RUN pytest
   
   FROM python:3.12-slim
   WORKDIR /app
   COPY --from=builder /app /app
   RUN pip install -r requirements.txt
   CMD ["python", "app.py"]

   installs dependencies after copying, which is inefficient.

   FROM python:3.12 AS builder
   WORKDIR /app
   COPY requirements.txt .
   RUN pip install -r requirements.txt
   COPY . .
   RUN pytest
   
   FROM python:3.12-slim
   WORKDIR /app
   COPY --from=builder /app /app
   RUN pip install -r requirements.txt
   CMD ["python", "app.py"]

   reinstalls dependencies in second stage, increasing image size.

3. Final Answer:

   Uses virtualenv in builder stage to install dependencies and run tests, copies entire /app including venv to slim runtime -> Option A

4. Quick Check:

   Install and test in builder, copy to slim runtime [OK]

Hint: Install and test in builder, copy only needed files to slim image [OK]

Common Mistakes:

• Not using multi-stage builds
• Reinstalling dependencies in final stage
• Running tests in final image
• Copying unnecessary files