/Shell/Bash/Best practices, build multi stage docker image securely

Best practices, build multi stage docker image securely

# --------------> The build image
FROM node:latest AS build
WORKDIR /usr/src/app
COPY package*.json /usr/src/app/
RUN --mount=type=secret,mode=0644,id=npmrc,target=/usr/src/app/.npmrc npm ci --only=production
 
# --------------> The production image
FROM node:lts-alpine
RUN apk add dumb-init
ENV NODE_ENV production
USER node
WORKDIR /usr/src/app
COPY --chown=node:node --from=build /usr/src/app/node_modules /usr/src/app/node_modules
COPY --chown=node:node . /usr/src/app
CMD ["dumb-init", "node", "server.js"]


docker build . -t nodejs-tutorial --secret id=npmrc,src=.npmrc
DOCKER_BUILDKIT=1 docker build . -t nodejs-tutorial --build-arg NPM_TOKEN=1234 --secret id=npmrc,src=.npmrc

Source: snyk.io

Best practices, build multi stage docker image securely

# --------------> The build image
FROM node:latest AS build
ARG NPM_TOKEN
WORKDIR /usr/src/app
COPY package*.json /usr/src/app/
RUN echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc && \
   npm ci --only=production && \
   rm -f .npmrc
 
# --------------> The production image
FROM node:lts-alpine@sha256:b2da3316acdc2bec442190a1fe10dc094e7ba4121d029cb32075ff59bb27390a
RUN apk add dumb-init
ENV NODE_ENV production
USER node
WORKDIR /usr/src/app
COPY --chown=node:node --from=build /usr/src/app/node_modules /usr/src/app/node_modules
COPY --chown=node:node . /usr/src/app
CMD ["dumb-init", "node", "server.js"]

Source: snyk.io

Similar codes

1 vote184 views1 answer
Install gnu grep on mac
Shell/Bash
10 votes238 views5 answers
Command 'nvm' not found, but there are 13 similar ones.
Shell/Bash
0 vote220 views1 answer
Verify large directory after copy files
Shell/Bash
0 vote171 views1 answer
Failed to find 'typescript' module. Please check, NODE_PATH contains location of global 'typescript' or install locally in your project
Shell/Bash
0 vote195 views1 answer
Winehq-stable : Depends: wine-stable (= 5.0.1~bionic)
Shell/Bash
0 vote294 views6 answers
Sanctum laravel
Shell/Bash
0 vote186 views1 answer
Shell get location of function
Shell/Bash
0 vote224 views1 answer
How to install scrapy-user agents
Shell/Bash
134 votes266 views6 answers
Npm update package
Shell/Bash
7 votes213 views1 answer
Linux move everything in a directory to another directory
Shell/Bash