Dockerfile ni nini na unaiandika vipi?

Question

IT Interview Practice · Accepted Answer

**Dockerfile** ni faili ya maandishi yenye maelekezo ya **kujenga Docker image** — inaelezea base image, tegemezi, faili za kunakili, na jinsi ya kuendesha programu. Inafanya ujenzi wa image uweze kuzalishwa upya na kudhibitiwa kwa matoleo.

## Dockerfile ya msingi

```dockerfile
# FROM — the base image to build on
FROM node:20-alpine

# WORKDIR — set the working directory inside the image
WORKDIR /app

# COPY dependency files first (for better layer caching)
COPY package*.json ./
# RUN — execute a command during the BUILD (install dependencies)
RUN npm install

# COPY the rest of the application code
COPY . .

# EXPOSE — document the port the app listens on
EXPOSE 3000

# CMD — the command to run when a CONTAINER starts
CMD ["node", "server.js"]
```

## Maelekezo muhimu

```text
FROM     → the base image (starting point) — REQUIRED, usually first
WORKDIR  → set the working directory for subsequent instructions
COPY/ADD → copy files from the host into the image
RUN      → execute a command at BUILD time (install packages, compile) → creates a layer
ENV      → set environment variables
EXPOSE   → document which port(s) the container listens on
CMD      → the default command to run when the container STARTS (one per Dockerfile)
ENTRYPOINT → the executable that runs (CMD provides default args to it)
ARG      → build-time variables
```

## RUN dhidi ya CMD dhidi ya ENTRYPOINT (mara nyingi huchanganywa)

```text
RUN        → runs at BUILD time (builds the image — e.g. install dependencies)
CMD        → runs at CONTAINER START (the default command; overridable at run)
ENTRYPOINT → the main executable at start (CMD becomes its default arguments)
→ RUN builds the image; CMD/ENTRYPOINT define what runs when it starts.
```

## Kwa nini ni muhimu

Kuelewa Dockerfile ni muhimu kwa sababu ndiyo jinsi Docker images zinavyojengwa, hivyo kuandika moja ni ujuzi wa msingi wa kila siku wa Docker.

Dockerfile hutoa **ujenzi wa image unaoweza kuzalishwa upya na kudhibitiwa kwa matoleo** — ikielezea kwa msimbo hasa jinsi ya kujenga image (base image, tegemezi, faili, usanidi, na amri ya kuendesha), ili kila mtu aweze kujenga image hiyo hiyo kwa ulinganifu, jambo ambalo ni kiini cha thamani ya Docker ya uzalishaji upya.

Kuelewa **maelekezo muhimu** — `FROM` (base image), `WORKDIR`, `COPY` (kuingiza faili), `RUN` (kuendesha amri za wakati wa ujenzi kama kusakinisha tegemezi), `ENV`, `EXPOSE`, na `CMD`/`ENTRYPOINT` (kufafanua kinachoendesha wakati container inapoanza) — ni lazima kuandika Dockerfiles zenye ufanisi kwa programu halisi.

Tofauti muhimu sana na inayochanganywa mara nyingi ni **`RUN` dhidi ya `CMD` dhidi ya `ENTRYPOINT`**: `RUN` huendesha wakati wa **ujenzi** (kujenga image, mfano kusakinisha packages), wakati `CMD`/`ENTRYPOINT` hufafanua kinachoendesha wakati **container inapoanza** (amri ya programu) — kuelewa hili kunazuia makosa ya kawaida.

Kujua mifumo ya kivitendo (kama kunakili faili za tegemezi kabla ya msimbo kwa layer caching bora) kunaonyesha kuandika Dockerfiles zenye ufanisi.

Kwa kuwa kujenga images ni msingi wa kutumia Docker (kila mtiririko wa kazi wa Docker unahusisha images, na Dockerfile ndiyo jinsi images maalumu zinavyojengwa), na kwa kuwa kuelewa maelekezo na tofauti ya wakati-wa-ujenzi dhidi ya wakati-wa-uendeshaji ni lazima kuunda images sahihi na zenye ufanisi, kuelewa Dockerfile ni maarifa muhimu ya Docker yanayotumika mara kwa mara — ujuzi wa msingi kwa yeyote anayetumia Docker, utaratibu unaobadilisha ahadi ya uzalishaji upya ya Docker kuwa vitendo na hitaji la karibu la ulimwengu wote la kuweka programu katika containers.

Dockerfile ya msingi

Maelekezo muhimu

RUN dhidi ya CMD dhidi ya ENTRYPOINT (mara nyingi huchanganywa)

Kwa nini ni muhimu

Maswali yanayohusiana