The docker shell syntax (which is just a string as the RUN
, ENTRYPOINT
, and CMD
) will run that string as the parameter to /bin/sh -c
. This gives you a shell to expand variables, sub commands, piping output, chaining commands together, and other shell conveniences.
RUN ls * | grep $trigger_filename || echo file missing && exit 1
The exec syntax simply runs the binary you provide with the args you include, but without any features of the shell parsing. In docker, you indicate this with a json formatted array.
RUN ["/bin/app", "arg1", "arg2"]
The advantage of the exec syntax is removing the shell from the launched process, which may inhibit signal processing. The reformatting of the command with /bin/sh -c
in the shell syntax may also break concatenation of your entrypoint and cmd together.
The entrypoint documentation does a good job covering the various scenarios and explaining this in more detail.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…