5

Size of the images golang and alpine vary by around 300Mb.

What are the advantages of using golang image instead of plain alpine?

4
  • 2
    If you create a static go binary, you can use scratch
    – Matt
    Oct 31, 2017 at 5:50
  • 1
    There is also golang:alpine. Oct 31, 2017 at 5:51
  • @Зелёный Yes there is golang:alpine but it is ~200Mb more than base alpine. just want to know what is the advantage of golang image
    – Shettyh
    Oct 31, 2017 at 6:00
  • 1
    The main advantage is obviously go lang tools(and many other tools such as git or bash), those tools don't available in plain alpine docker images. Here is a good thread about a small docker images. I think your question is probably off-topic here IMO. Oct 31, 2017 at 6:07

2 Answers 2

6

Short answer: It would be fairer to compare the differences between golang:alpine and alpine.

At the time of writing, the golang image is built off of Debian, a different distribution than Alpine. I'll quote the documentation from Docker Hub:

golang:<version>

This is the defacto image. If you are unsure about what your needs are, you probably want to use this one. It is designed to be used both as a throw away container (mount your source code and start the container to start your app), as well as the base to build other images off of.

and

golang:alpine

This image is based on the popular Alpine Linux project, available in the alpine official image. Alpine Linux is much smaller than most distribution base images (~5MB), and thus leads to much slimmer images in general.

This variant is highly recommended when final image size being as small as possible is desired. The main caveat to note is that it does use musl libc instead of glibc and friends, so certain software might run into issues depending on the depth of their libc requirements. However, most software doesn't have an issue with this, so this variant is usually a very safe choice. See this Hacker News comment thread for more discussion of the issues that might arise and some pro/con comparisons of using Alpine-based images.

In summary, images built off of Alpine will tend to be smaller than the Debian ones. But, they won't contain various system tools that you may find useful for development and debugging. A common compromise is to build your binaries with the golang flavor and deploy to production with either golang:alpine, alpine, or as mentioned in a comment above, scratch.

2
  • So in summary it is better to use just alpine image in production and golang;alpine for development and building the image ?
    – Shettyh
    Oct 31, 2017 at 16:57
  • 1
    Yes, for some use cases. That would be a good rule of thumb if you don't mind using a minimal distro (Alpine will generally need additional configuration to make your app function properly).
    – bosgood
    Oct 31, 2017 at 20:21
6

Why not scratch?

You can build a static go binary file and copy it into the docker image.

The size of the docker image will be equal to the size of the binary file.

Suppose that your go binary file is called main_go, this is the Dockerfile that you need:

FROM centurylink/ca-certs
ADD main_go /
CMD ["/main_go"]

Please remember that scratch and centurylink are blank images therefore you must statically compile your app with all libraries built in.

Example:

CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o main_go .

Here you can find some extra info about docker, go and scratch and here you can find some info about the GOOS value.

Update: Multi-stage builds using alpine to build the image.

ARG GO_VERSION=1.15.6
 
# STAGE 1: building the executable
FROM golang:${GO_VERSION}-alpine AS build
RUN apk add --no-cache git
RUN apk --no-cache add ca-certificates
 
# add a user here because addgroup and adduser are not available in scratch
RUN addgroup -S myapp \
    && adduser -S -u 10000 -g myapp myapp
 
WORKDIR /src
COPY ./go.mod ./go.sum ./
RUN go mod download
 
COPY ./ ./
 
# Run tests
RUN CGO_ENABLED=0 go test -timeout 30s -v github.com/gbaeke/go-template/pkg/api
 
# Build the executable
RUN CGO_ENABLED=0 go build \
    -installsuffix 'static' \
    -o /app ./cmd/app
 
# STAGE 2: build the container to run
FROM scratch AS final
LABEL maintainer="gbaeke"
COPY --from=build /app /app
 
# copy ca certs
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 
# copy users from builder (use from=0 for illustration purposes)
COPY --from=0 /etc/passwd /etc/passwd
 
USER myapp
 
ENTRYPOINT ["/app"]

More info can be found here.

2
  • 1
    Good call on scratch and centurylink/ca-certs. But if you import "C" or use a library that does, like a wrapper over a C library, you can't really use scratch though? Jul 31, 2018 at 12:52
  • 2
    The centurylink repo isn't maintained anymore, so I'd suggest editing the answer and removing references to it.
    – Gautam
    Jun 8, 2021 at 14:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.