What is a multi-stage build, and why does it matter?
What they are really testing: Whether you know how to separate build-time from runtime so the final image is small and clean. A strong signal of someone who has shipped real images.
A real interview question
What is a multi-stage build, and why does it matter?
What most people say
drag me
“It is a Dockerfile with multiple stages to organize the build.”
It names the mechanism but not the benefit. The point is shipping only the artifact in a slim final image, dropping build tools, size, and attack surface, which is what makes it worth doing.
The follow-ups they ask next
What specifically does multi-stage keep out of the production image?
Compilers, build tools, package managers, dev dependencies, and source code, everything only needed to build. The final image carries just the artifact and its runtime, shrinking size and attack surface.
Why is a smaller image more secure, not just faster?
Fewer packages and no shell/compilers means a smaller attack surface and fewer CVEs to patch. An intruder in a distroless image has almost no tools to pivot with.
What the interviewer is listening for
- Builder stage + slim final stage
- Copies only the artifact
- Cites size + attack-surface + CVE benefits
What sinks the answer
- Only "multiple stages to organize"
- Ships build tools in the final image
- No size/security rationale
If you genuinely do not know
Say this instead of freezing. Reasoning out loud from what you do know beats silence every single time, and a good interviewer is listening for exactly that.
“Multi-stage uses [several FROM stages: a builder with compilers/deps, then a slim final stage]. The final stage [copies only the built artifact and drops the build tooling]. It matters because [the runtime image is far smaller with a smaller attack surface], which means [faster pulls, lower cost, fewer CVEs]. Named stages also [let CI target a build/test stage].”
Keep going with docker
Foundation
What is a container, and how is it different from a virtual machine?
Foundation
What is the difference between a Docker image and a container?
Foundation
What is a Dockerfile, and what do the main instructions do?
Junior
How does the Docker build cache work, and how do you order a Dockerfile to use it well?
Junior
What is the difference between CMD and ENTRYPOINT, and what is the exec versus shell form?
Junior
How does container networking work in Docker, and how do containers talk to each other?
Knowing the answer is not the same as recalling it under pressure
Sign in to send the questions you fumble to spaced recall, so they come back right before you would forget them, and learn the concepts behind them with hands-on labs.
Start free