Master Dockerfile: 5 Essential Tricks for Faster, Safer Builds

A Dockerfile defines the steps to create a Docker image, and writing it efficiently is crucial for fast, reliable builds.

1. Control Cache Usage

Docker caches each layer, speeding up rebuilds, but sometimes you need to force a layer to rebuild. Insert a harmless, frequently changing command before RUN to invalidate the cache, such as:

RUN echo $(date) > /dev/null && apt-get update && apt-get install -y some-package

The date output changes every build, ensuring subsequent apt-get update and apt-get install run without using the cache.

2. Pass and Use Build Arguments

Use ARG to define build‑time variables, then expose them to the runtime environment with ENV if needed:

ARG GIT_USERNAME
ARG GIT_PASSWORD

ENV GIT_USERNAME=${GIT_USERNAME}
ENV GIT_PASSWORD=${GIT_PASSWORD}

3. Securely Transfer Sensitive Information

When handling secrets like Git credentials, store them temporarily with .git-credentials, perform the clone, and delete the file to reduce exposure:

RUN git config --global credential.helper store && \
    echo "https://${GIT_USERNAME}:${GIT_PASSWORD}@github.com" > ~/.git-credentials && \
    git clone https://github.com/your-private-repo.git /app && \
    rm ~/.git-credentials

4. Handle Special Characters in Passwords

Passwords containing characters such as @ must be URL‑encoded. Use sed or jq to encode them before embedding in a URL:

RUN ENCODED_PASSWORD=$(echo ${GIT_PASSWORD} | sed 's/@/%40/g; s/:/%3A/g; s/\//%2F/g; s/ /%20/g; s/?/%3F/g; s/#/%23/g; s/&/%26/g; s/=/%3D/g') && \
    git clone https://${GIT_USERNAME}:${ENCODED_PASSWORD}@github.com/your-private-repo.git /app

Alternatively, with jq:

GIT_PASSWORD_ENCODED=$(echo -n ${GIT_PASSWORD} | jq -s -R -r @uri)

5. Ensure Build Stops on Errors

Prevent a Docker build from continuing after a failed command by:

Chaining commands with && so each step runs only if the previous one succeeded.

Using set -e at the start of a RUN line.

Explicitly checking a command’s exit status and exiting on failure.

Examples:

RUN apt-get update && apt-get install -y build-essential curl vim git && apt-get clean && rm -rf /var/lib/apt/lists/*

RUN set -e && \
    apt-get update && \
    apt-get install -y build-essential curl vim git && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

RUN echo "run some command" || exit 1

Conclusion

By mastering cache control, build‑argument handling, secure secret management, special‑character encoding, and robust error handling, you can write Dockerfiles that produce fast, reliable, and secure container images.