Docker and CI/CD · Senior · Question 59 of 75

Why avoid Docker-in-Docker with `--privileged` for building images in CI?

✓Correct answer: Privileged jobs can take over the runner host
2Images built this way can't be pushed anywhere
3Docker-in-Docker can't build multi-stage images

Explanation

Rootless BuildKit, kaniko-style builders or remote builders produce images without giving jobs full host access.

Further reading

Test yourself

Take the Docker and CI/CD · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.