Lab → scenario

Dockerfile design

Pick instructions for a secure, minimal production image.

Requirements

Final stage base image

node:20-alpine (minimal runtime) node:20 with full build toolchain node:latest (unpinned)

Runtime user

Create USER app and switch before CMD Run as root for file permissions Install sudo and run as root

Artifacts into final stage

COPY --from=build /app/dist ./dist COPY entire repo including node_modules COPY . . without build stage