Separate build and runtime environments
| Build environment | Runtime environment |
|---|---|
Compilers (e.g. javac) |
Runtime (e.g. java) |
| Build dependencies | Execution dependencies |
Build tools (e.g. make) |
- |
| Large image | Smaller attack surface |
This also works in the legacy builder
–
Multi-stage with legacy build system:
docker build \
--tag hello-world-java:multi \
.
Multi-stage with BuildKit:
DOCKER_BUILDKIT=1 docker build \
--tag hello-world-java:multi \
.