Tutorial: Containerize a .NET app

In this tutorial, you'll learn how to containerize a .NET application with Docker. Containers have many features and benefits, such as being an immutable infrastructure, providing a portable architecture, and enabling scalability. The image can be used to create containers for your local development environment, private cloud, or public cloud.

In this tutorial, you:

  • Create and publish a simple .NET app
  • Create and configure a Dockerfile for .NET
  • Build a Docker image
  • Create and run a Docker container

You'll understand the Docker container build and deploy tasks for a .NET application. The Docker platform uses the Docker engine to quickly build and package apps as Docker images. These images are written in the Dockerfile format to be deployed and run in a layered container.


This tutorial is not for ASP.NET Core apps. If you're using ASP.NET Core, see the Learn how to containerize an ASP.NET Core application tutorial.


Install the following prerequisites:

  • .NET SDK
    If you have .NET installed, use the dotnet --info command to determine which SDK you're using.
  • Docker Community Edition
  • A temporary working folder for the Dockerfile and .NET example app. In this tutorial, the name docker-working is used as the working folder.

Create .NET app

You need a .NET app that the Docker container will run. Open your terminal, create a working folder if you haven't already, and enter it. In the working folder, run the following command to create a new project in a subdirectory named App:

dotnet new console -o App -n DotNet.Docker

Your folder tree will look like the following:

πŸ“ docker-working
    β””β”€β”€πŸ“‚ App
        β””β”€β”€πŸ“‚ obj
            β”œβ”€β”€ DotNet.Docker.csproj.nuget.dgspec.json
            β”œβ”€β”€ DotNet.Docker.csproj.nuget.g.props
            β”œβ”€β”€ DotNet.Docker.csproj.nuget.g.targets
            β”œβ”€β”€ project.assets.json
            └── project.nuget.cache

The dotnet new command creates a new folder named App and generates a "Hello World" console application. Change directories and navigate into the App folder, from your terminal session. Use the dotnet run command to start the app. The application will run, and print Hello World! below the command:

cd App
dotnet run
Hello World!

The default template creates an app that prints to the terminal and then immediately terminates. For this tutorial, you'll use an app that loops indefinitely. Open the Program.cs file in a text editor.


If you're using Visual Studio Code, from the previous terminal session type the following command:

code .

This will open the App folder that contains the project in Visual Studio Code.

The Program.cs should look like the following C# code:

Console.WriteLine("Hello World!");

Replace the file with the following code that counts numbers every second:

var counter = 0;
var max = args.Length is not 0 ? Convert.ToInt32(args[0]) : -1;
while (max is -1 || counter < max)
    Console.WriteLine($"Counter: {++counter}");
    await Task.Delay(TimeSpan.FromMilliseconds(1_000));

Save the file and test the program again with dotnet run. Remember that this app runs indefinitely. Use the cancel command Ctrl+C to stop it. The following is an example output:

dotnet run
Counter: 1
Counter: 2
Counter: 3
Counter: 4

If you pass a number on the command line to the app, it will only count up to that amount and then exit. Try it with dotnet run -- 5 to count to five.


Any parameters after -- are not passed to the dotnet run command and instead are passed to your application.

Publish .NET app

Before adding the .NET app to the Docker image, first it must be published. It is best to have the container run the published version of the app. To publish the app, run the following command:

dotnet publish -c Release

This command compiles your app to the publish folder. The path to the publish folder from the working folder should be .\App\bin\Release\net7.0\publish\

From the App folder, get a directory listing of the publish folder to verify that the DotNet.Docker.dll file was created.

dir .\bin\Release\net7.0\publish\

    Directory: C:\Users\dapine\App\bin\Release\net7.0\publish

Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-a---           2/13/2023  1:52 PM            431 DotNet.Docker.deps.json
-a---           2/13/2023  1:52 PM           6144 DotNet.Docker.dll
-a---           2/13/2023  1:52 PM         153600 DotNet.Docker.exe
-a---           2/13/2023  1:52 PM          11052 DotNet.Docker.pdb
-a---           2/13/2023  1:52 PM            253 DotNet.Docker.runtimeconfig.json

Create the Dockerfile

The Dockerfile file is used by the docker build command to create a container image. This file is a text file named Dockerfile that doesn't have an extension.

Create a file named Dockerfile in the directory containing the .csproj and open it in a text editor. This tutorial will use the ASP.NET Core runtime image (which contains the .NET runtime image) and corresponds with the .NET console application.

FROM mcr.microsoft.com/dotnet/sdk:7.0 AS build-env

# Copy everything
COPY . ./
# Restore as distinct layers
RUN dotnet restore
# Build and publish a release
RUN dotnet publish -c Release -o out

# Build runtime image
FROM mcr.microsoft.com/dotnet/aspnet:7.0
COPY --from=build-env /App/out .
ENTRYPOINT ["dotnet", "DotNet.Docker.dll"]


The ASP.NET Core runtime image is used intentionally here, although the mcr.microsoft.com/dotnet/runtime:7.0 image could have been used.


This Dockerfile uses multi-stage builds, which optimizes the final size of the image by layering the build and leaving only required artifacts. For more information, see Docker Docs: multi-stage builds.

The FROM keyword requires a fully qualified Docker container image name. The Microsoft Container Registry (MCR, mcr.microsoft.com) is a syndicate of Docker Hub β€” which hosts publicly accessible containers. The dotnet segment is the container repository, whereas the sdk or aspnet segment is the container image name. The image is tagged with 7.0, which is used for versioning. Thus, mcr.microsoft.com/dotnet/aspnet:7.0 is the .NET 7.0 runtime. Make sure that you pull the runtime version that matches the runtime targeted by your SDK. For example, the app created in the previous section used the .NET 7.0 SDK and the base image referred to in the Dockerfile is tagged with 7.0.

Save the Dockerfile file. The directory structure of the working folder should look like the following. Some of the deeper-level files and folders have been omitted to save space in the article:

πŸ“ docker-working
    β””β”€β”€πŸ“‚ App
        β”œβ”€β”€ Dockerfile
        β”œβ”€β”€ DotNet.Docker.csproj
        β”œβ”€β”€ Program.cs
        β”œβ”€β”€πŸ“‚ bin
        β”‚   β””β”€β”€πŸ“‚ Release
        β”‚       β””β”€β”€πŸ“‚ net7.0
        β”‚           β””β”€β”€πŸ“‚ publish
        β”‚               β”œβ”€β”€ DotNet.Docker.deps.json
        β”‚               β”œβ”€β”€ DotNet.Docker.exe
        β”‚               β”œβ”€β”€ DotNet.Docker.dll
        β”‚               β”œβ”€β”€ DotNet.Docker.pdb
        β”‚               └── DotNet.Docker.runtimeconfig.json
        └──obj πŸ“

From your terminal, run the following command:

docker build -t counter-image -f Dockerfile .

Docker will process each line in the Dockerfile. The . in the docker build command sets the build context of the image. The -f switch is the path to the Dockerfile. This command builds the image and creates a local repository named counter-image that points to that image. After this command finishes, run docker images to see a list of images installed:

docker images
REPOSITORY                         TAG       IMAGE ID       CREATED          SIZE
counter-image                      latest    2f15637dc1f6   10 minutes ago   208MB

The counter-image repository is the name of the image. The latest tag is the tag that is used to identify the image. The 2f15637dc1f6 is the image ID. The 10 minutes ago is the time the image was created. The 208MB is the size of the image. The final steps of the Dockerfile are to create a container from the image and run the app, copy the published app to the container, and define the entry point.

FROM mcr.microsoft.com/dotnet/aspnet:7.0
COPY --from=build-env /build/out .
ENTRYPOINT ["dotnet", "DotNet.Docker.dll"]

The COPY command tells Docker to copy the specified folder on your computer to a folder in the container. In this example, the publish folder is copied to a folder named build in the container.

The WORKDIR command changes the current directory inside of the container to App.

The next command, ENTRYPOINT, tells Docker to configure the container to run as an executable. When the container starts, the ENTRYPOINT command runs. When this command ends, the container will automatically stop.


For added security, you can opt out of the diagnostic pipeline. When you opt-out this allows the container to run as read-only. To do this, specify a DOTNET_EnableDiagnostics environment variable as 0 (just before the ENTRYPOINT step):

ENV DOTNET_EnableDiagnostics=0

For more information on various .NET environment variables, see .NET environment variables.


.NET 6 standardizes on the prefix DOTNET_ instead of COMPlus_ for environment variables that configure .NET run-time behavior. However, the COMPlus_ prefix will continue to work. If you're using a previous version of the .NET runtime, you should still use the COMPlus_ prefix for environment variables.

From your terminal, run docker build -t counter-image -f Dockerfile . and when that command finishes, run docker images.

docker build -t counter-image -f Dockerfile .
[+] Building 0.2s (14/14) FINISHED
 => [internal] load build definition from Dockerfile                                  0.0s
 => => transferring dockerfile: 32B                                                   0.0s
 => [internal] load .dockerignore                                                     0.0s
 => => transferring context: 2B                                                       0.0s
 => [internal] load metadata for mcr.microsoft.com/dotnet/aspnet:7.0                  0.1s
 => [internal] load metadata for mcr.microsoft.com/dotnet/sdk:7.0                     0.1s
 => [build-env 1/5] FROM mcr.microsoft.com/dotnet/sdk:7.0@sha256:80dce5844ecdc719704  0.0s
 => [internal] load build context                                                     0.0s
 => => transferring context: 4.00kB                                                   0.0s
 => [stage-1 1/3] FROM mcr.microsoft.com/dotnet/aspnet:7.0@sha256:8dd65c009a093947cb  0.0s
 => CACHED [stage-1 2/3] WORKDIR /App                                                 0.0s
 => CACHED [build-env 2/5] WORKDIR /App                                               0.0s
 => CACHED [build-env 3/5] COPY . ./                                                  0.0s
 => CACHED [build-env 4/5] RUN dotnet restore                                         0.0s
 => CACHED [build-env 5/5] RUN dotnet publish -c Release -o out                       0.0s
 => CACHED [stage-1 3/3] COPY --from=build-env /App/out .                             0.0s
 => exporting to image                                                                0.0s
 => => exporting layers                                                               0.0s
 => => writing image sha256:2094c4692eeaeabebfa2cc68f77907e9ca8455deea948012690c6639  0.0s
 => => naming to docker.io/library/counter-image                                      0.0s

docker images
REPOSITORY      TAG       IMAGE ID       CREATED              SIZE
counter-image   latest    2094c4692eea   About a minute ago   212MB

Each command in the Dockerfile generated a layer and created an IMAGE ID. The final IMAGE ID (yours will be different) is 2f15637dc1f6 and next you'll create a container based on this image.

Create a container

Now that you have an image that contains your app, you can create a container. You can create a container in two ways. First, create a new container that is stopped.

docker create --name core-counter counter-image

The docker create command from above will create a container based on the counter-image image. The output of that command shows you the CONTAINER ID (yours will be different) of the created container:


To see a list of all containers, use the docker ps -a command:

docker ps -a
CONTAINER ID   IMAGE           COMMAND                  CREATED          STATUS    PORTS     NAMES
d0be06126f7d   counter-image   "dotnet DotNet.Docke…"   12 seconds ago   Created             core-counter

Manage the container

The container was created with a specific name core-counter, this name is used to manage the container. The following example uses the docker start command to start the container, and then uses the docker ps command to only show containers that are running:

docker start core-counter

docker ps
CONTAINER ID   IMAGE           COMMAND                  CREATED          STATUS          PORTS     NAMES
cf01364df453   counter-image   "dotnet DotNet.Docke…"   53 seconds ago   Up 10 seconds             core-counter

Similarly, the docker stop command will stop the container. The following example uses the docker stop command to stop the container, and then uses the docker ps command to show that no containers are running:

docker stop core-counter

docker ps

Connect to a container

After a container is running, you can connect to it to see the output. Use the docker start and docker attach commands to start the container and peek at the output stream. In this example, the Ctrl+C keystroke is used to detach from the running container. This keystroke will end the process in the container unless otherwise specified, which would stop the container. The --sig-proxy=false parameter ensures that Ctrl+C will not stop the process in the container.

After you detach from the container, reattach to verify that it's still running and counting.

docker start core-counter

docker attach --sig-proxy=false core-counter
Counter: 7
Counter: 8
Counter: 9

docker attach --sig-proxy=false core-counter
Counter: 17
Counter: 18
Counter: 19

Delete a container

For this article, you don't want containers hanging around that don't do anything. Delete the container you previously created. If the container is running, stop it.

docker stop core-counter

The following example lists all containers. It then uses the docker rm command to delete the container and then checks a second time for any running containers.

docker ps -a
CONTAINER ID    IMAGE            COMMAND                   CREATED          STATUS                        PORTS    NAMES
2f6424a7ddce    counter-image    "dotnet DotNet.Dock…"    7 minutes ago    Exited (143) 20 seconds ago            core-counter

docker rm core-counter

docker ps -a

Single run

Docker provides the docker run command to create and run the container as a single command. This command eliminates the need to run docker create and then docker start. You can also set this command to automatically delete the container when the container stops. For example, use docker run -it --rm to do two things, first, automatically use the current terminal to connect to the container, and then when the container finishes, remove it:

docker run -it --rm counter-image
Counter: 1
Counter: 2
Counter: 3
Counter: 4
Counter: 5

The container also passes parameters into the execution of the .NET app. To instruct the .NET app to count only to 3 pass in 3.

docker run -it --rm counter-image 3
Counter: 1
Counter: 2
Counter: 3

With docker run -it, the Ctrl+C command will stop process that is running in the container, which in turn, stops the container. Since the --rm parameter was provided, the container is automatically deleted when the process is stopped. Verify that it doesn't exist:

docker ps -a


The docker run command also lets you modify the ENTRYPOINT command from the Dockerfile and run something else, but only for that container. For example, use the following command to run bash or cmd.exe. Edit the command as necessary.

In this example, ENTRYPOINT is changed to cmd.exe. Ctrl+C is pressed to end the process and stop the container.

docker run -it --rm --entrypoint "cmd.exe" counter-image

Microsoft Windows [Version 10.0.17763.379]
(c) 2018 Microsoft Corporation. All rights reserved.

 Volume in drive C has no label.
 Volume Serial Number is 3005-1E84

 Directory of C:\

04/09/2019  08:46 AM    <DIR>          app
03/07/2019  10:25 AM             5,510 License.txt
04/02/2019  01:35 PM    <DIR>          Program Files
04/09/2019  01:06 PM    <DIR>          Users
04/02/2019  01:35 PM    <DIR>          Windows
               1 File(s)          5,510 bytes
               4 Dir(s)  21,246,517,248 bytes free


Essential commands

Docker has many different commands that create, manage, and interact with containers and images. These Docker commands are essential to managing your containers:

Clean up resources

During this tutorial, you created containers and images. If you want, delete these resources. Use the following commands to

  1. List all containers

    docker ps -a
  2. Stop containers that are running by their name.

    docker stop core-counter
  3. Delete the container

    docker rm core-counter

Next, delete any images that you no longer want on your machine. Delete the image created by your Dockerfile and then delete the .NET image the Dockerfile was based on. You can use the IMAGE ID or the REPOSITORY:TAG formatted string.

docker rmi counter-image:latest
docker rmi mcr.microsoft.com/dotnet/aspnet:7.0

Use the docker images command to see a list of images installed.


Image files can be large. Typically, you would remove temporary containers you created while testing and developing your app. You usually keep the base images with the runtime installed if you plan on building other images based on that runtime.

Next steps