Docker Interview Questions and Answers for freshers

1. What is Docker?

   • Answer: Docker is an open-source platform designed to automate the deployment, scaling, and management of applications using containers. It packages an application and its dependencies into a container, ensuring consistent execution across different environments.

2. What is a Docker container?

   • Answer: A Docker container is a standardized unit of software that packages code and all its dependencies, such as libraries, system tools, runtime, settings, etc., into one package. This ensures that the application runs consistently regardless of the underlying infrastructure.

3. What is a Docker image?

   • Answer: A Docker image is a read-only template with instructions for creating a Docker container. It contains the application code, runtime, libraries, system tools, and settings needed to run the application. Think of it as a blueprint for a container.

4. Explain the difference between a Docker image and a Docker container.

   • Answer: An image is a read-only template, a snapshot of the application and its dependencies. A container is a running instance of an image. You create a container from an image. Multiple containers can be created from a single image.

5. What is a Dockerfile?

   • Answer: A Dockerfile is a text document containing instructions for building a Docker image. It specifies the base image, commands to run, files to copy, and other configurations needed to create the image.

6. What is Docker Hub?

   • Answer: Docker Hub is a public registry for Docker images. It allows developers to share and download images, making it easier to reuse existing software components and collaborate on projects.

7. Explain the concept of Docker layers.

   • Answer: Docker images are built in layers. Each instruction in the Dockerfile creates a new layer. This layering system allows for efficient image management as only changed layers need to be rebuilt, speeding up the process.

8. What are Docker volumes?

   • Answer: Docker volumes are persistent storage mechanisms for containers. Data stored in volumes persists even if the container is deleted or the image is updated. They are separate from the image and the container's filesystem.

9. What is Docker Compose?

   • Answer: Docker Compose is a tool for defining and running multi-container Docker applications. It uses a YAML file (docker-compose.yml) to specify the services, networks, and volumes needed to run the application.

10. What is Docker Swarm?

    • Answer: Docker Swarm is a native clustering tool for Docker. It allows you to create and manage a cluster of Docker hosts to run applications at scale.

11. What is Kubernetes? How does it differ from Docker Swarm?

    • Answer: Kubernetes is a more robust and feature-rich container orchestration platform than Docker Swarm. While Swarm is integrated with Docker, Kubernetes is a standalone system that can manage containers from various sources. Kubernetes offers more advanced features like self-healing, automated rollouts, and scaling.

12. How do you run a Docker container in detached mode?

    • Answer: Use the `-d` flag with the `docker run` command. For example: `docker run -d `

13. How do you stop a Docker container?

    • Answer: Use the `docker stop ` command.

14. How do you remove a Docker container?

    • Answer: Use the `docker rm ` command. Ensure the container is stopped before removing it.

15. How do you list all running Docker containers?

    • Answer: Use the `docker ps` command.

16. How do you list all Docker containers (running and stopped)?

    • Answer: Use the `docker ps -a` command.

17. How do you build a Docker image from a Dockerfile?

    • Answer: Navigate to the directory containing the Dockerfile and run the command `docker build -t .` The `.` specifies the current directory.

18. How do you push a Docker image to Docker Hub?

    • Answer: First, log in to Docker Hub using `docker login`. Then, tag your image with your Docker Hub username and repository name: `docker tag /:`. Finally, push the image: `docker push /:`.

19. What is the purpose of the `EXPOSE` instruction in a Dockerfile?

    • Answer: The `EXPOSE` instruction informs Docker about the ports the application inside the container listens on. It doesn't actually publish the ports; that's done during container runtime.

20. What is the purpose of the `CMD` instruction in a Dockerfile?

    • Answer: The `CMD` instruction sets the default command to be executed when a container is created from the image. It can be overridden when running the container.

21. What is the purpose of the `ENTRYPOINT` instruction in a Dockerfile?

    • Answer: `ENTRYPOINT` specifies the main process for the container. Unlike `CMD`, it cannot be overridden when running the container. It's typically used for executable files or scripts.

22. What is the difference between `CMD` and `ENTRYPOINT`?

    • Answer: `CMD` provides defaults that can be overridden, while `ENTRYPOINT` defines the main executable that cannot be overridden. You often use both; `ENTRYPOINT` for the main process, and `CMD` for parameters or options.

23. What is the `COPY` instruction in a Dockerfile used for?

    • Answer: `COPY` copies files and directories from the host machine to the image during the build process.

24. What is the `ADD` instruction in a Dockerfile used for?

    • Answer: `ADD` is similar to `COPY`, but it can also download files from a URL.

25. What is Docker networking?

    • Answer: Docker networking allows containers to communicate with each other and with the outside world. Docker uses different network drivers to manage this communication.

26. What are some common Docker network drivers?

    • Answer: `bridge` (default), `host`, `overlay` (for Swarm), `macvlan`, `none`.

27. What is the `bridge` network driver?

    • Answer: The `bridge` driver creates a virtual bridge network, allowing containers on the same host to communicate with each other. Containers on different hosts cannot communicate directly unless using overlay networks.

28. What is the `host` network driver?

    • Answer: The `host` driver makes the container share the host machine's network stack. This means the container doesn't have its own IP address and shares the host's network namespace.

29. Explain Docker image tagging.

    • Answer: Image tagging allows you to create different versions or variations of an image. Tags are usually version numbers (e.g., `latest`, `1.0`, `v2.3`).

30. How do you tag a Docker image?

    • Answer: Use the `docker tag : :` command.

31. How do you search for Docker images on Docker Hub?

    • Answer: Use the `docker search ` command.

32. What is a Docker registry?

    • Answer: A Docker registry is a storage and distribution system for Docker images. Docker Hub is a popular public registry.

33. What are Docker secrets?

    • Answer: Docker secrets are a way to securely store and manage sensitive information, such as passwords and API keys, that your applications need access to. They are kept separate from the images and configurations.

34. How do you manage Docker images (prune)?

    • Answer: Use commands like `docker image prune` (removes unused images), `docker system prune` (removes unused images, containers, networks, and volumes), and `docker rmi ` (removes a specific image).

35. What is the purpose of the `.dockerignore` file?

    • Answer: The `.dockerignore` file specifies files and directories that should be excluded when building a Docker image. This helps to reduce image size and improve build times.

36. How can you check the logs of a running Docker container?

    • Answer: Use the command `docker logs `

37. How can you exec a command into a running Docker container?

    • Answer: Use the command `docker exec -it `

38. What is Docker context?

    • Answer: A Docker context is a named configuration that saves the settings for a remote Docker environment, including the Docker daemon's address and credentials. This simplifies interacting with multiple remote environments.

39. What are some best practices for writing Dockerfiles?

    • Answer: Use a minimal base image, keep layers small, use multi-stage builds, leverage caching, use `.dockerignore`, document your Dockerfile clearly.

40. Explain the concept of a Docker Compose file (`docker-compose.yml`).

    • Answer: A `docker-compose.yml` file defines the services, networks, and volumes for a multi-container application. It simplifies the process of defining and managing the application's infrastructure.

41. How do you run a multi-container application using Docker Compose?

    • Answer: Create a `docker-compose.yml` file defining your services. Then, navigate to the directory containing the file and run the command `docker-compose up -d`.

42. What is the difference between `docker-compose up` and `docker-compose up -d`?

    • Answer: `docker-compose up` runs the containers in the foreground, while `docker-compose up -d` runs them in detached mode (in the background).

43. How do you scale a service in Docker Compose?

    • Answer: Use the `docker-compose scale =` command.

44. How do you stop all containers managed by Docker Compose?

    • Answer: Use the command `docker-compose down`.

45. What are some common Docker security considerations?

    • Answer: Use minimal base images, regularly update images, scan images for vulnerabilities, limit container privileges, use secrets management, and properly configure networking.

46. What is a Docker daemon?

    • Answer: The Docker daemon is a background process that manages Docker objects such as images, containers, networks, and volumes. It listens for requests from the Docker client and carries out commands.

47. What is a Docker client?

    • Answer: The Docker client is the command-line interface (CLI) that allows you to interact with the Docker daemon. You use commands like `docker run`, `docker ps`, etc., to send instructions to the daemon.

48. What are Docker namespaces?

    • Answer: Docker uses namespaces to isolate containers from the host machine and from each other. Each container gets its own isolated view of the system's resources, such as process IDs, network interfaces, and mount points.

49. What are Docker control groups (cgroups)?

    • Answer: Docker uses cgroups to limit the resources (CPU, memory, I/O) that a container can use. This provides isolation and prevents runaway processes from affecting the host or other containers.

50. What are some advantages of using Docker?

    • Answer: Consistency across environments, improved developer workflow, efficient resource utilization, simplified deployment and scaling, easier portability.

51. What are some disadvantages of using Docker?

    • Answer: Learning curve, potential security risks if not properly configured, performance overhead in some cases, resource consumption for managing containers.

52. How does Docker improve CI/CD pipelines?

    • Answer: Docker allows consistent builds and deployments across different stages of the CI/CD pipeline. It ensures that the application runs the same way in development, testing, and production.

53. Explain the concept of Docker's Union File System.

    • Answer: Docker's Union File System (although the implementation has changed in later versions) is a layered filesystem that combines multiple read-only layers with a single writable layer. This improves efficiency by only writing changes to the writable layer.

54. How can you check the status of a Docker daemon?

    • Answer: Use the command `systemctl status docker` (on systems using systemd) or `sudo service docker status` (on systems using SysVinit).

55. What is the `--rm` flag in the `docker run` command?

    • Answer: The `--rm` flag automatically removes the container when it exits.

56. How can you connect a container to a specific network?

    • Answer: Use the `--net` flag with the `docker run` command, specifying the network name. For example: `docker run --net my-network `

57. What is the purpose of Docker labels?

    • Answer: Docker labels are key-value pairs that you can add to images and containers to provide metadata. They can be used for filtering, searching, and automation.

58. How do you specify environment variables for a Docker container?

    • Answer: You can use the `-e` or `--env` flag with the `docker run` command, or set them within the Dockerfile using `ENV`.

59. How can you limit the CPU resources of a Docker container?

    • Answer: You can use the `--cpus` flag with the `docker run` command to limit the number of CPU cores available to the container.

60. How can you limit the memory resources of a Docker container?

    • Answer: You can use the `--memory` flag with the `docker run` command to specify the maximum amount of memory the container can use.

61. What are some tools for managing Docker images and containers?

    • Answer: Portainer, Docker Compose, Docker Swarm, Kubernetes, Rancher.

62. What is the difference between a Dockerfile and a docker-compose.yml file?

    • Answer: A Dockerfile defines a single container image, while a docker-compose.yml file defines a multi-container application.

Thank you for reading our blog post on 'Docker Interview Questions and Answers for freshers'.We hope you found it informative and useful.Stay tuned for more insightful content!