What is the difference between CMD and ENTRYPOINT in a Dockerfile?

by

Docker has a default entrypoint which is /bin/sh -c but does not have a default command.

When you run docker like this:
docker run -i -t ubuntu bash
the entrypoint is the default /bin/sh -c, the image is ubuntu and the command is bash.

The command is run via the entrypoint. i.e., the actual thing that gets executed is /bin/sh -c bash. This allowed Docker to implement RUN quickly by relying on the shell’s parser.

Later on, people asked to be able to customize this, so ENTRYPOINT and --entrypoint were introduced.

Everything after the image name, ubuntu in the example above, is the command and is passed to the entrypoint. When using the CMD instruction, it is exactly as if you were executing
docker run -i -t ubuntu <cmd>
The parameter of the entrypoint is <cmd>.

You will also get the same result if you instead type this command docker run -i -t ubuntu: a bash shell will start in the container because in the ubuntu Dockerfile a default CMD is specified:
CMD ["bash"].

As everything is passed to the entrypoint, you can have a very nice behavior from your images. @Jiri example is good, it shows how to use an image as a “binary”. When using ["/bin/cat"] as entrypoint and then doing docker run img /etc/passwd, you get it, /etc/passwd is the command and is passed to the entrypoint so the end result execution is simply /bin/cat /etc/passwd.

Another example would be to have any cli as entrypoint. For instance, if you have a redis image, instead of running docker run redisimg redis -H something -u toto get key, you can simply have ENTRYPOINT ["redis", "-H", "something", "-u", "toto"] and then run like this for the same result: docker run redisimg get key.

More Related Contents:

  1. How to include files outside of Docker’s build context?
  2. How do I pass environment variables to Docker containers?
  3. Assign static IP to Docker container
  4. Docker – a way to give access to a host USB or serial device?
  5. Docker: How to clear the logs properly for a Docker container?
  6. How to specify Memory & CPU limit in docker compose version 3
  7. Access Docker socket within container
  8. How to get a list of images on docker registry v2
  9. How to pass arguments within docker-compose?
  10. Docker mount to folder overriding content
  11. Is it possible to start a shell session in a running container (without ssh)
  12. Why are Docker container images so large?
  13. Docker for GUI-based environments?
  14. How can I delete Docker’s images?
  15. How to use environment variables in docker-compose?
  16. How do I set hostname in docker-compose?
  17. Is it safe to clean docker/overlay2/
  18. Keycloak Docker HTTPS required
  19. How do I set environment variables during the build in docker
  20. How to set image name in Dockerfile?
  21. Docker – how can I copy a file from an image to a host?
  22. Using docker-compose with CI – how to deal with exit codes and daemonized linked containers?
  23. How to get Docker containers to talk to each other while running on my local host?
  24. Kafka access inside and outside docker [duplicate]
  25. How do I configure docker compose to expose ports correctly?
  26. Change directory command in Docker?
  27. Docker container doesn’t expose ports when –net=host is mentioned in the docker run command
  28. How to share localhost between two different Docker containers?
  29. How many CPUs does a docker container use?
  30. Start sshd automatically with docker container

Leave a Comment