Builders pass a version string with --build-arg while assembling a court-calendar image. How do ARG and ENV differ for configuration?
Select an answer to reveal the explanation.
Short Explanation
ARG is chalk on the workshop blackboard—gone when the build ends. ENV is a label that stays on the finished machine. Neither place is a safe vault for production secrets.
Full Explanation
ARG supplies build-time values (including via --build-arg) and does not automatically become the process environment. ENV does persist into the running container. Baking production secrets into either still embeds them in image layers—an anti-pattern; secret retrieval belongs elsewhere.