Defence Against the Docker Arts

Re:Defence Against the Docker Arts by whalesalad on Thursday April 04, 2019 @02:06PM (#19575306)

Layers are each a tarball, extracted one by one on top of one another to get you to the end result.

[ Parent | on HN ]

Re:Defence Against the Docker Arts by RantyDave on Thursday April 04, 2019 @11:46PM (#19579516)

So docker untars a filesystem which contains a file "foo" and calls this layer "1". Then it encounters a "RUN some_installer_thing" which removes file "foo" and calls this layer "2".

If you just untar the layers on top of each other, foo will still be there. This is a problem, no?

[ Parent | on HN ]