Delete the apt-get lists after installing anything DOK-DL3009
Cleaning up the apt cache and removing /var/lib/apt/lists helps keep the image size down. Since the RUN statement starts with apt-get update, the package cache will always be refreshed prior to apt-get install.
Avoid cache directory with pip install --no-cache-dir <package> DOK-P1003
Once a package is installed, it does not need to be re-installed and the Docker cache can be leveraged instead. Since the pip cache makes the images larger and is not needed, it's better to disable it.
Missing yarn cache clean after yarn install DOK-P1005
yarn keeps a local cache of downloaded packages. Not cleaning cached package data after installation can result in higher image sizes.
It is always recommended to clean the cached packages after installing them.
Use COPY instead of ADD for files and folders DOK-DL3020
For items like files and directories that do not require ADD’s tar auto-extraction capability, you should always use COPY. Read more about it here.
Use ADD to extract archives into an image DOK-DL3010
COPY only supports the basic copying of local files into the container, while ADD has some additional features (like local-only tar extraction and remote URL support) that are not immediately obvious. Consequently, the best use for ADD is local tar file auto-extraction into the image.
Missing yum clean all after yum install DOK-P1000
Not cleaning cached package data after installation can result in higher image sizes. It is always recommended to clean the cached packages after installing them.
Missing zypper clean after zypper install DOK-P1001
Not cleaning cached package data after installation can result in higher image sizes. It is always recommended to clean the cached packages after installing them.
Please note that the clean-up must be performed in the same RUN step as it creates a separate layer. Doing this in a different RUN command would therefore result in a new layer, which will not help reduce the image size.
Missing dnf clean all after dnf install command DOK-P1002
Not cleaning cached package data after installation can result in higher image sizes. It is always recommended to clean the cached packages after installing them.
Found useradd without -l flag DOK-P1004
Without the -l or the --no-log-init flag, useradd will add the user to the lastlog and faillog databases. This can result in the creation of logically large (sparse) files under /var/log, which in turn unnecessarily inflates container image sizes. This is due to the lack of support for sparse files in overlay filesystems. For what it's worth, this behavior becomes more apparent with longer UIDs, resulting in a few megabytes of extra image size with a six-digit UID, up to several gigabytes of excessive image size with even longer UIDs. Disabling this functionality from useradd has minimal disadvantages in a container but saves space and build time.