05. Dockerfile Optimization: Layer Caching, Non-Root Users & Ultra-Light Alpine Multi-Stage Builds • DevOps, Docker & Cloud VPS Deployment Mastery • Rishabh Ki Kaksha

DevOps, Docker & Cloud VPS Deployment Mastery › 05. Dockerfile Optimization: Layer Caching, Non-Root Users & Ultra-Light Alpine Multi-Stage Builds

45 mins

← Prev Next →

Course Syllabus

Module 1: Linux System Administration & Kernel Performance Tuning

01. Linux OS Architecture: Kernel vs User Space, System Calls & Process Management (ps, top, htop) 02. Linux File Permissions (chmod, chown, SUID/SGID) & Sticky Bits Security 03. Networking & Diagnostics: netstat, ss, lsof, tcpdump, curl, dig & DNS Resolution

Part 1: Linux & Docker Containerization

Module 2: Containerization with Docker & Multi-Stage Builds

04. Docker Architecture: Namespaces, Cgroups, UnionFS & Docker Engine Internals 05. Dockerfile Optimization: Layer Caching, Non-Root Users & Ultra-Light Alpine Multi-Stage Builds 06. Docker Compose: Multi-Container Networking, Persistent Volumes & Environment Config 07. Docker Production Security: Read-Only Root FS, Capabilities Drop & Container Scanning

Part 2: Nginx, SSL, PM2 & Automated CI/CD

Module 3: Nginx Reverse Proxy, SSL Automation & Security Hardening

08. Nginx Masterclass: Event-Driven Non-Blocking Architecture vs Apache Multi-Threaded 09. Nginx as Reverse Proxy, Load Balancer (upstream) & Gzip/Brotli Compression Config 10. SSL/TLS Automation with Certbot Let's Encrypt, HTTP/2 & Strict-Transport-Security (HSTS) 11. Nginx Rate Limiting (limit_req), DDoS Mitigation & Security Headers Injection

Module 4: Process Management with PM2 & Systemd Services

12. Systemd Services: Creating Custom System Daemons with Automatic Restart & Logging 13. PM2 Enterprise Process Manager: Cluster Mode, Ecosystem Config & Graceful Reloads 14. Log Management & Rotation: logrotate, journalctl & Centralized Syslog Streaming

Module 5: CI/CD Automation with GitHub Actions & Zero-Downtime Deployments

15. CI/CD Foundations: Building Automated Test & Build Pipelines with GitHub Actions 16. Automated SSH Deployments: Self-Hosted Runners, Deploy Keys & Zero-Downtime Atomic Symlinks 17. Blue-Green & Canary Deployment Strategies on Cloud VPS Infrastructure

Module 6: Cloud VPS Production Hardening, Firewall (UFW) & Backups

18. Cloud VPS Hardening: Non-Root Sudo Users, SSH Key-Only Auth, Fail2ban & UFW Firewall Rules 19. Automated Database & Media Backups to Cloud Storage (AWS S3 / Cloudflare R2 / MinIO) 20. Server Health Monitoring & Alerting: Uptime Kuma, Netdata, Prometheus & Telegram Bot Webhooks

Interactive Lesson Studio

# 05. Dockerfile Optimization: Layer Caching, Non-Root Users & Ultra-Light Alpine Multi-Stage Builds

> DevOps & Cloud VPS Notes by Rishabh - Topic 05

---

### 1. Production Multi-Stage Dockerfile (Shrinking 1.2GB Image to 65MB! ⚡)

```dockerfile
# ================================
# STAGE 1: Build Dependencies
# ================================
FROM node:20-alpine AS builder
WORKDIR /app

# Copy dependency manifests first to leverage Docker Layer Caching:
COPY package.json package-lock.json ./
RUN npm ci

# Copy source code and compile TypeScript:
COPY . .
RUN npm run build && npm prune --production

# ================================
# STAGE 2: Ultra-Lightweight Production Runtime
# ================================
FROM node:20-alpine AS runner
WORKDIR /app

# Security: Create non-root system user:
RUN addgroup --system --gid 1001 nodejs && \
    adduser --system --uid 1001 nextjs

# Copy ONLY compiled production artifacts from builder stage:
COPY --from=builder --chown=nextjs:nodejs /app/dist ./dist
COPY --from=builder --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=nextjs:nodejs /app/package.json ./package.json

USER nextjs
EXPOSE 3000
ENV NODE_ENV=production

CMD ["node", "dist/main.js"]
```

---

### 2. Docker Layer Caching Best Practices 🧠

*   Frequently changing code (`COPY . .`) hamesha Dockerfile ke **end me hona chahiye**.
*   Infrequently changing dependency files (`package.json`, `npm ci`) **upar hone chahiye**.

---

### 3. Master Comparison Matrix

---

### 4. Interview Ke 3 Sawal Is Topic Se

1. **`.dockerignore` file build context transfer me kaise help karti hai?** -> `node_modules`, `.git`, `.env` local files ko build context daemon me transfer hone se rokti hai, build time 10x fast karti hai.
2. **Distroless images kya hoti hain?** -> Google ki minimal images jisme shell (`/bin/sh`), package manager (`apt`/`apk`) kuch bhi nahi hota — sirf application binary aur runtime hota hai (Near-zero attack surface).
3. **`npm ci` vs `npm install` inside Dockerfile me kya farak hai?** -> `npm ci` strictly `package-lock.json` verify karta hai aur `node_modules` ko clean slate install karta hai bina lockfile update kiye.

---
**Next Topic:** 06. Docker Compose: Multi-Container Networking, Persistent Volumes & Environment Config

Loading lesson content...

Python 3.12

Full IDE

Live Execution Terminal

Click "Execute Live" to run code.
                

Lesson Mastery AI Quiz

AI Doubt Solver

CERTIFICATE OF COMPLETION

Rishabh Gehlot

PHP 8+ & Laravel 11 Master Track