PrepZone Logo
PrepZone

Images, Layers, and the Container Runtime

Image layers, union filesystem, containerd, and how Docker caches builds.

Why this matters

  • This topic directly affects how reliably BookStore reaches production — docker images are stacked layers.
  • Interviewers connect hands-on commands and manifests to real delivery stories, not buzzwords.
  • Later modules assume you can explain both the why and the concrete file or command involved.
  • Platform maturity shows up when teams automate this instead of relying on tribal knowledge.
bookstore:1.2.0
Layer 4 — CMDjava -jar app.jar
Layer 3 — COPY jarApplication artefact
Layer 2 — RUN adduserNon-root user
Layer 1 — FROMeclipse-temurin:21-jre

Changing Layer 3 invalidates cache for layers 3 and 4 only

Each Dockerfile instruction creates a layer. Cached layers speed up rebuilds when nothing changed above them.

Layer caching

Order Dockerfile instructions: BookStore engineers treat this as part of the standard path from laptop to docker images and layers readiness. Document decisions in the team runbook so on-call knows which knobs exist.

Key ideas

  • Layer caching — primary idea for docker-images-and-layers
  • BookStore context — catalog API, checkout, and inventory services share the same pattern
  • Automation — prefer pipeline jobs over manual SSH steps
  • Verification — staging must prove the change before prod traffic

Inspect images

history and size: When staging matches production architecture, BookStore catches misconfigurations early. Pair this section's practice with observability dashboards to confirm behavior under load.

Key ideas

  • Inspect images — operational detail
  • Rollback — know how to revert without rebuilding artefacts
  • Security — least privilege for deploy roles
  • Documentation — link runbooks from the service README

Production checklist

Before promoting BookStore changes tied to this topic, run automated tests, inspect artefact immutability (image digest or JAR checksum), execute a staging smoke test on /actuator/health, and watch error-rate dashboards for thirty minutes after prod rollout.

Key ideas

  • Staging soak — validate under synthetic load
  • Change ticket — attach pipeline URL and artefact digest
  • On-call — page owner stays on dashboards during rollout
  • Post-deploy — record metrics baseline for comparison
Java
docker history ghcr.io/bookstore/api:1.3.2
docker build -t bookstore-api:local .

Quick recall

Everything you need if you only revisit this box.

  • BookStore uses docker images and layers as a standard delivery practice.
  • Prefer automation and versioned config over manual server changes.
  • Staging proves changes before customer-facing promotion.
  • Observability confirms success — do not rely on silence alone.
  • Rollback plans must be tested, not invented during an outage.
  • Security and least privilege apply to every pipeline and cluster role.

Test yourself

Answer these before moving on — recall is what makes it stick.