dockerfile-slim

SKILL.md

---
name: dockerfile-slim
description: Use when writing a Dockerfile. Multi-stage build, slim base image, non-root user, sensible CMD/ENTRYPOINT split.
---

# Dockerfile slim

When writing a Dockerfile:

1. Multi-stage: `builder` (full image) → `runner` (slim/distroless).
2. Pin the base image (`node:20.11-slim`, not `node:slim`).
3. Run as non-root: `USER node` (or create a `app` user).
4. Don't copy `node_modules` from host. Copy `package*.json` first, install, then copy source — leverage layer cache.
5. `HEALTHCHECK` if the service is long-lived; sensible `EXPOSE`.

标签