Guides

Multi-stage Builds से Docker Image कैसे छोटा करें

By Ravindra Bagale, DevOps trainer · LinkedIn · Published: 28 October 2026 · Last updated: 28 October 2026

Builder + slim + COPY --from + dockerignore + नापें।

Language: English · मराठी · हिंदी

Image छोटा क्यों

बड़ी images EKS pull धीमा और ECR बर्बाद करती हैं।

Why: तेज़ deploy। What: Multi-stage build। How: Fat vs slim लिखें।

Example 1: Fat Dockerfile sketch

Type this:

mkdir -p /tmp/ms && printf "%s\n" "FROM python:3.12" "WORKDIR /app" "COPY . ." "RUN pip install flask" "CMD [\"python\",\"app.py\"]" > /tmp/ms/Dockerfile.fat && wc -l /tmp/ms/Dockerfile.fat

You will see:

5 /tmp/ms/Dockerfile.fat

What it means: One stage keeps build tools — often hundreds of MB.

Example 2: Multi-stage sketch

Type this:

printf "%s\n" "FROM python:3.12 AS builder" "WORKDIR /app" "COPY requirements.txt ." "RUN pip install --user -r requirements.txt" "FROM python:3.12-slim" "WORKDIR /app" "COPY --from=builder /root/.local /root/.local" "COPY app.py ." "CMD [\"python\",\"app.py\"]" > /tmp/ms/Dockerfile && wc -l /tmp/ms/Dockerfile

You will see:

9 /tmp/ms/Dockerfile

What it means: Builder installs; slim runtime copies the install path only.

Example 3: Tiny app files

Type this:

printf "%s\n" "flask==3.0.0" > /tmp/ms/requirements.txt && printf "%s\n" "print(\"ok\")" > /tmp/ms/app.py && ls /tmp/ms

You will see:

Dockerfile Dockerfile.fat app.py requirements.txt

What it means: Minimal app files like many Infosys internal tools.

Concept 1: दो stages

Builder फिर slim।

Why: Compiler prod में नहीं। What: COPY --from= How: Install builder में।

Example 2: Multi-stage sketch

Type this:

printf "%s\n" "FROM python:3.12 AS builder" "WORKDIR /app" "COPY requirements.txt ." "RUN pip install --user -r requirements.txt" "FROM python:3.12-slim" "WORKDIR /app" "COPY --from=builder /root/.local /root/.local" "COPY app.py ." "CMD [\"python\",\"app.py\"]" > /tmp/ms/Dockerfile && wc -l /tmp/ms/Dockerfile

You will see:

9 /tmp/ms/Dockerfile

What it means: Builder installs; slim runtime copies the install path only.

Example 7: React or Node pattern

Type this:

printf "%s\n" "COPY --from=builder /app/dist /usr/share/nginx/html"

You will see:

COPY --from=builder /app/dist /usr/share/nginx/html

What it means: Builder runs npm build; nginx stage serves dist.

Example 8: Pin base tags

Type this:

printf "%s\n" "Prefer python:3.12-slim not latest" "Pin digests in production when policy asks"

You will see:

Prefer python:3.12-slim not latest
Pin digests in production when policy asks

What it means: latest drifts — TCS prod pipelines pin versions.

Concept 2: dockerignore

Junk ignore; size नापें।

Why: Secrets बाहर। What: .dockerignore; images How: EC2 lab।

Example 4: Add .dockerignore

Type this:

printf "%s\n" ".git" "__pycache__" "*.pyc" ".env" "Dockerfile.fat" > /tmp/ms/.dockerignore && cat /tmp/ms/.dockerignore

You will see:

.git
__pycache__
*.pyc
.env
Dockerfile.fat

What it means: dockerignore keeps secrets and junk out of every stage.

Example 5: Build if Docker exists

Type this:

command -v docker >/dev/null && docker build -t lab-flask:slim /tmp/ms || printf "%s\n" "docker not running here — files ready for your EC2 lab"

You will see:

docker not running here — files ready for your EC2 lab

What it means: On Amazon Linux EC2 with Docker, the same build tags a slim image.

Example 6: Compare mental sizes

Type this:

printf "%s\n" "FAT: full python image often 1GB+ with deps" "SLIM: python slim + user install often a few hundred MB"

You will see:

FAT: full python image often 1GB+ with deps
SLIM: python slim + user install often a few hundred MB

What it means: Exact numbers vary — always check docker images on your host.

Example 10: Check layers

Type this:

printf "%s\n" "docker history lab-flask:slim" "Huge RUN pip in final stage means COPY --from failed"

You will see:

docker history lab-flask:slim
Huge RUN pip in final stage means COPY --from failed

What it means: Final history should not show compiler installs.

Concept 3: Traps

Final में पूरी COPY न करें।

Why: एक गलत COPY। What: सिर्फ artifact। How: Shrink card।

Example 9: Non-root sketch

Type this:

printf "%s\n" "RUN useradd -r appuser" "USER appuser"

You will see:

RUN useradd -r appuser
USER appuser

What it means: Prefer non-root in the final stage when the base allows it.

Example 11: Common trap

Type this:

printf "%s\n" "TRAP: COPY . . in final stage pulls node_modules again"

You will see:

TRAP: COPY . . in final stage pulls node_modules again

What it means: Copy only the artifact folder into runtime.

Example 12: Shrink card

Type this:

printf "%s\n" "1 builder 2 slim runtime 3 COPY --from 4 .dockerignore 5 docker images"

You will see:

1 builder 2 slim runtime 3 COPY --from 4 .dockerignore 5 docker images

What it means: Memorize for Flipkart Docker interview rounds.

Shrink card

1 builder 2 slim 3 COPY --from 4 dockerignore 5 images

Suppose: React+nginx

dist copy।

Suppose: Spring jar

JRE stage।

Check yourself (quiz)

Builder → slim → COPY --from → नापें। Did you understand? Let us try it once more.