Menene gidaje mstages maraya da me yasa a yi amfani da su?

Question

Accepted Answer

**Gidaje mages maraya** suna amfani da marayan `FROM` da yawa a cikin Dockerfile ɗaya — gina aikacin a gida ɗaya (tare da kayan ginawa) da kwafi jiya-jiya abubuwan gida zuwa gida na ƙarshe mai tsƙirewa, maƙasuwa. Wannan yana samar da hoto ta saningiyar tsada, ƙarnar **ba kullum ba, mafi ciyewa** hoton aiki..

## Matsala: kayan ginawa suna bugi hoto

```text
Building an app needs build tools (compilers, dev dependencies, SDKs), but the
FINAL image shouldn't include them:
  → they bloat the image (larger size, slower deploys)
  → they increase the attack surface (more software = more vulnerabilities)
→ You want only the built artifact + its runtime in the final image.
```

## Gida mages maraya

```dockerfile
# STAGE 1: "build" — has all the build tools (compile/bundle the app)
FROM node:20 AS build
WORKDIR /app
COPY package*.json ./
RUN npm install              # includes dev dependencies, build tools
COPY . .
RUN npm run build            # produces /app/dist

# STAGE 2: final — a clean, minimal image with ONLY the built artifact
FROM nginx:alpine
COPY --from=build /app/dist /usr/share/nginx/html   # copy ONLY the build output
# → the final image has NO build tools, no dev dependencies — just nginx + the built files
```

`--from=build` yana kwafi abubuwan gida daga gida mages zuwa hoto na ƙarshe. Hoto na ƙarshe **ba ya haɗa da komai daga gida mages sai abin da kuke kwafi a bayyane** — saboda haka kayan ginawa, tallafi gida, da tushen ba za su kasance a saningiyar aiki ba.

## Fa'idodi

```text
✓ SMALLER images — only the runtime + artifacts (often 10x+ smaller)
✓ More SECURE — fewer packages = smaller attack surface (no compilers/build tools)
✓ Faster deploys/pulls (smaller images transfer faster)
✓ One Dockerfile — build and final image together (no separate build scripts)
→ Common for compiled languages (Go, Rust, Java) and Node/frontend builds.
```

## Me yasa ya dace

Jikar gidaje mages maraya yana da muhimmanci don **samar da hoton aiki mai tsada, maƙasuwa**, saboda haka yana da mahimmaniyar ilimi na aikace-aikace na gina hoton Docker na ingancin aiki.

Matsala da yake warware shine ainihi kuma ya kasance na gida: gina aikacin yana buƙatar **kayan ginawa** (na‚aji, SDK, tallafi gida) wanda **hoton aiki na ƙarshe ba ya kamata ya haɗa** — haɗawa tare da su yana bugi hoto (girma mafi girma, jinkira da bugi marubuta) kuma yana ƙara **fesa fursu** (karin kunshin software yana nufin ƙarin haɗuwar da'a). **Gidaje mages maraya** suna warware wannan ta hanyar kirki ta amfani da marayan `FROM` masu yawa: gina aikacin a gida tare da dukkan kayan, sannan **kwafi jiya-jiya abubuwan gida** (`--from=build`) zuwa gida mai tsada, maƙasuwa wanda ba ya haɗa da komai.

Wannan yana samar da hoton da suke **girma mafi girma** (sau 10x+ kaɗan — jiya-jiya lokaci da abubuwan gida) kuma **mafi ciyewa** (babu kayan ginawa ko kunshin ba dole ba don damje), tare da ajiye duka a Dockerfile gida (babu tsarin ginawa daban-daban).

Wannan tsarin yana dace da yarukan da aka shibi (Go, Rust, Java, inda na‚aji ba ya buƙatar a lokaci na aiki) kuma don gida dabali/Node (inda kayan ginawa da tushe ba su buƙatar a saningiyar aiki).

Tun da hoton aiki mai tsada, maƙasuwa yana da mahimmanci don saurin aiki, ajiyewa, kuma sunan jiya, kuma tun da gidaje mages maraya shine tsarin daidai, tasiri mai kaya don isowa (raba yanayin ginawa daga sunan aiki maƙasuwa), jika gidaje mages maraya — matsala ta bugi/jiya da suke warware, yadda suke aiki, kuma fa'idodinsu — yana da muhimmanci, ilimi da aka yi amfani daadle don gina hoton Docker na ingancin aiki, mafi kyau a amfani a ainihi Dockerfile kuma ikon mahadi don samar da aikace-aikace da ke da ma'ana, maƙasuwa da aka saka a akwati.