Choosing a Base Image
FROM selects the starting image. Official images are available for common runtimes such as Node.js, Python, PHP, Java, and Nginx. Alpine-based images are often small, while Debian-based images may be easier when native packages are required.
Pin a deliberate major or minor version rather than depending on an unspecified runtime. For high-assurance builds, consider pinning by image digest as part of your supply-chain process.
ADVERTISEMENT