Search for a command to run...
Yusuf Adeyemo is a DevOps Engineer from Nigeria. He loves helping startups deliver better software and provide more control over their environment and software development process with the help of modern tools and automation.
Thanks so much for this article. Yes the Alpine image is quite popular among Docker articles mostly based on its small size. But I understand the reason you have given for not using it in production. This is a valuable article for Docker newbies as it makes life easy. I hear about Docker compose. What is that?
Thanks for this comment Abdulrafiu Lawal.
Talking of Docker compose, It is a tool that allows you to run multiple containers as a single service. Each container here runs in isolation but can interact with one another when necessary. Docker Compose files are very simple to write in YAML. Another great feature of Docker Compose is the ability to activate all services (containers) with a single command. I should write about it soonest.
We’ve all been there. You spend hours perfectly tuning your OpenWrt configuration, setting up your captive portals, and hardening your firewall. Then, six months later, the system hangs. Why? Because
This article started from a tweet. Someone on Twitter said they "lowkey want to understand the technology behind Google Authenticator" and I dropped a quick reply - explaining that it's basically TOTP: your device and the server share a secret key, b...
Have you ever sat there waiting for your CodeBuild project to rebuild your entire Docker image... again? Even though you only changed a single line of code? Yeah, me too. And it's frustrating. Today, I'm going to show you how I reduced our Docker bui...
After you complete this article, you will have a solid understanding of: Why deploying Next.js SSR on Cloudflare is different from traditional hosting The real difference between Cloudflare Pages with next-on-pages and OpenNext adapter How the fre...
After you complete this article, you will have a solid understanding of: What L1, L2, and L3 constructs actually are and when to use each Why AWS created three different abstraction levels (and the hidden benefits) How to avoid the most common CDK...
In the article, I will show you how to Dockerize a Production ready NodeJS application in just seven steps by following some best practices.
Prerequisite:
Basic Docker Experience
Basic NodeJS Experience
Your favorite IDE or Text Editor.
Getting started:
Docker is an open-source project that makes it easy to create containers and container-based apps. Originally built for Linux, Docker now runs on Windows and macOS. To understand how Docker works, let’s look at some components for developing Docker-containerized applications.
Each Docker container starts with a Dockerfile. A Dockerfile is a text file written in simple syntax that contains instructions for creating a Docker image. A Dockerfile specifies the operating system that will run the container, as well as the languages, environmental variables, file locations, network ports, and other components it will require, as well as what the container will do once it is launched.
Once you have your Dockerfile written, you invoke the Docker build utility to create an image based on that Dockerfile. Whereas the Dockerfile is the set of instructions that tells the builder how to make the image, a Docker image is a portable file containing the specifications for which software components the container will run and how. Because a Dockerfile will probably include instructions about grabbing some software packages from online repositories, you should take care to explicitly specify the proper versions, or else your Dockerfile might produce inconsistent images depending on when it’s invoked. But once an image is created, it’s static.
Enough talk about docker and images. Let’s get to business.
Open VSCode and create a file with the name Dockerfile. This contains all of the command-line commands we could use to assemble an image.
FROM node:16-bullseye-slim : We specify the base image for the build process. This must be specified on the first line of a Dockerfile. However, you may use it as many times as you like. You might have heard alphine has one of the smallest images. That's true, but I don't recommend it for production use. There are many reasons for this, but the most important one to me is that it is not on Tier1 support by the Node.js team. As for my use of node:16-bullseye-slim. It has a better CVE count, and it also has Tier 1 support from the NodeJS Team.
RUN mkdir /app && chown -R node:node /app : RUN mkdir is needed because WORKDIR doesn’t respect USER when creating directories, and USER is a way of not using the ROOT user; I will explain this shortly.
WORKDIR /app: This command is used to specify the current working directory of a Docker container. In the above snippet, we specify app directory as our working directory.
USER node : When executing our containerized Node.js web applications, we should always adhere to the principle of least privilege; this is a security policy that has been around since the early days of Unix. If an attacker compromises your web application, running the process as root can make the attacker perform almost anything in the container. While running as a node user will limit the attack because a node user doesn't have root privileges.
COPY --chown=node:node . /app : This copies our files directory to the WORKDIR that we set up above, while --chown=node:node flag for COPY ensures that the files are owned by the unprivileged node user rather than the root, which is the default.
RUN npm ci --only=production && npm cache clean --force : This will ensure only production dependencies are installed and will clear the cache in npm.
CMD [ "node", "entrypoint.js" ] : CMD command defines the command to be executed inside the container. You might ask, ain't we going for a process manager like nodemon or pm2? It's not good for production; they add unnecessary complexity. If you require more replicas of your container, launch additional containers through your orchestrator.
Putting it all together, this is what your Dockerfile looks like:
FROM node:16-bullseye-slim
RUN mkdir /app && chown -R node:node /app
WORKDIR /app
USER node
COPY --chown=node:node . /app
RUN npm ci --only=production && npm cache clean --force
CMD [ "node", "entrypoint.js" ]
Bonus: Want to avoid unnecessary files in your Docker image? Add .dockerignore to your source code root directory and add .git and node_modules to avoid unnecessary files in your image.
And that's all for today! I hope you enjoyed it. Don't forget to share, react, and engage with me in the comment section.