This exercise assesses your ability to troubleshoot and optimize an existing Dockerfile.

This exercise assesses your ability to troubleshoot and optimize an existing Dockerfile.The task is to clone the repo, then examine dockerfile, Identify any issues or areas where best practices are not followed, and Submit an improved Dockerfile with annotations to explain your changes.

preconceived notions:

• The container runs a Next.js service.
• The directory containing the Dcokerfile includes many files that are not needed for building or running the service.
• This Dockerfile is built in three environments:
  • local
  • ephemeral (short-lived, encapsulated branch deployment. gets rebuilt after every commit)
  • production.
• We use any generic CI/CD providers that support containerization.

Scoring:

• Identification of issues and inefficiencies in the Dockerfile.
• Clarity and thoroughness of your suggestions for improvement.
• Adherence to Docker best practices.
• Attention to security and performance considerations.

Dockerfile:

FROM node:18.14.2-alpine3.17 as base

ARG NPM_TOKEN

ARG DATADOG_API_KEY

ARG DATADOG_SITE

ARG ENV

ARG VERSION

ARG APP_DOMAIN

ENV DD_VERSION=$VERSION

ENV DD_ENV=$ENV

ENV VERSION=$VERSION

ENV APP_DOMAIN=$APP_DOMAIN

# Installs latest Chromium (100) package.

RUN apk add –no-cache

chromium

nss

freetype

harfbuzz

ca-certificates

ttf-freefont

nodejs

yarn

# Tell Puppeteer to skip installing Chrome. We’ll be using the installed package.

ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser

# Puppeteer v13.5.0 works with Chromium 100.

RUN yarn add [email protected]

# Add user so we don’t need –no-sandbox.

RUN addgroup -S pptruser && adduser -S -G pptruser pptruser

&& mkdir -p /home/pptruser/Downloads /app

&& chown -R pptruser:pptruser /home/pptruser

&& chown -R pptruser:pptruser /app

WORKDIR /usr/src/app

RUN apk –no-cache add python3 make bash g++ curl

RUN set -x

&& echo “//npm.pkg.github.com/:_authToken=$NPM_TOKEN” > .npmrc

&& echo “@understood:registry=https://npm.pkg.github.com” >> .npmrc

COPY package*.json yarn.lock ./

RUN yarn install –frozen-lockfile –ignore-engines

COPY . .

RUN yarn build

# upload sourcemaps to datadog

RUN if [ “$ENV” = “ephemeral” ] ; then

npx @datadog/datadog-ci sourcemaps upload ./.next/static/chunks/ –service brand-pages –release-version ${DD_VERSION} –minified-path-prefix ${APP_DOMAIN}/_next/static/chunks/

; fi

RUN if [ “$ENV” = “qa” ] ; then

npx @datadog/datadog-ci sourcemaps upload ./.next/static/chunks/ –service brand-pages –release-version ${DD_VERSION} –minified-path-prefix https://qa.understood.org/_next/static/chunks/ 

&& npx @datadog/datadog-ci sourcemaps upload ./.next/static/chunks/ –service brand-pages –release-version ${DD_VERSION} –minified-path-prefix https://www.understood.org/_next/static/chunks/ 

; fi

EXPOSE 3006

CMD node –require ./server-preload.js ./node_modules/.bin/next start –port 3006

# Run everything after as non-privileged user.

USER pptruser