# Getting started with Chainguard's Dockerfile Converter

URL: https://chainguard-docs-preview-git-fix-learning-lab-jsonld.chainguard.app/software-security/learning-labs/ll202508.md
Last Modified: September 28, 2026
Tags: Learning Labs, Chainguard Containers, dfc

Learning Lab for August 2025 on DFC, a tool to convert Dockerfiles to use Chainguard Containers


The August 2025 Learning Lab with Erika Heidi covers [DFC](/chainguard/containers/migration/migration-tools/dockerfile-conversion/), or Dockerfile Converter, an open source tool created by the Chainguard team to facilitate migration to Chainguard Containers. In this session, learn how to install and use DFC to effectively convert your Dockerfiles to use minimal container images from Chainguard. Erika demonstrates how to use various flags to customize DFC's output and also how to connect the DFC MCP server to your AI assistant to have DFC functionality integrated within your current AI workflow.

[Watch the video on YouTube](https://www.youtube.com/watch?v=HzZRFpnKKIU)


## Sections

- [0:00](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=0s) Introduction
- [1:28](https://youtu.be/HzZRFpnKKIU?t=88) What is DFC?
- [3:42](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=222s) Why Convert to Chainguard  Containers
- [5:26](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=326s) How DFC works
- [9:22](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=562s) Tag Mappings
- [12:54](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=774s) Installation
- [15:45](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=945s) Demo 1: Basic Usage
- [21:50](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=1310s) Customizing DFC's Output
- [23:45](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=1425s) Demo 2: Customizing with Flags
- [28:55](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=1735s) Using DFC as a Go library
- [30:05](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=1805s) Using the DFC MCP server with an AI code assistant
- [32:19](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=1939s) Demo 3: Multi-stage Dockerfile conversion
- [36:29](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=2189s) Demo 4: Using DFC's MCP server with Claude Code
- [41:00](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=2460s) Q&A starts
- [52:54](https://www.youtube.com/watch?v=HzZRFpnKKIU&t=3174s) Closing Notes

## Demo 1

In the first demo, Erika demonstrates DFC's basic usage with a few inline conversions:

Converting a single `FROM` line:

```shell
echo "FROM node" | dfc -
```

Converting a single `RUN` line:

```shell
echo "RUN apt-get update && apt-get install -y nano" | dfc -
```

Erika also demonstrates how to run DFC to convert a whole Dockerfile. You can use this Python Dockerfile as a reference:

```Dockerfile
FROM python:3.9

ADD main.py .

RUN pip install requests beautifulsoup4 python-dotenv

CMD ["python", "./main.py"]
```

To convert this Dockerfile, run:

```shell
dfc Dockerfile
```

## Demo 2

In the second demo, Erika shows how to use various flags to customize output produced by DFC.

### Specifying the org

To specify the org and overwrite the `ORG` placeholder, you can use the `--org` flag:

```shell
dfc Dockerfile --org chainguard
```

### Using a custom mappings file

Sometimes, it might be useful to overwrite default mappings for images and packages. For example, let's consider the following Dockerfile for a `php-fpm` environment:

```Dockerfile
FROM php:fpm

RUN apt-get update && apt-get install -y \
    git \
    curl \
    libxml2-dev \
    zip \
    unzip

# Install Composer and set up application
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
RUN mkdir /application
COPY . /application/
RUN cd /application && composer install
```

With default settings, DFC will use Chainguard's `php:latest-dev` image for this environment, but we'd like it to use `php:latest-fpm-dev` instead. Create a mappings file such as this:

```custom-mappings.yaml
images:
    php:fpm: php:latest-fpm-dev
```

Then you can provide it alongside the `--mappings` flag when running DFC:

```shell
dfc --mappings="custom-mappings.yaml" Dockerfile
```

## Demo 3

The third demo shows how to convert multi-stage builds and how to connect the DFC MCP server to your AI assistant, using Claude Code as example.

### Converting multi-stage Dockerfiles

Consider the following Dockerfile as example:

```shell
FROM python:3.9 as builder
WORKDIR /app

RUN apt update && apt install -y curl git

ENV PATH="/venv/bin:$PATH"
RUN python -m venv /app/venv

COPY requirements.txt /app

RUN pip install --no-cache-dir -r requirements.txt

FROM python:3.9-slim
WORKDIR /app

ENV PATH="/venv/bin:$PATH"

COPY main.py /app
COPY --from=builder /app/venv /venv

CMD ["python", "/app/main.py"]
```

This example builds a runtime in two stages. To convert, run DFC as usual:

```shell
dfc Dockerfile --org chainguard
```

The expected result:

```shell
FROM cgr.dev/chainguard/python:3.9-dev AS builder
USER root
WORKDIR /app

RUN apk add --no-cache curl git

ENV PATH="/venv/bin:$PATH"
RUN python -m venv /app/venv

COPY requirements.txt /app

RUN pip install --no-cache-dir -r requirements.txt

FROM cgr.dev/chainguard/python:3.9-dev
USER root
WORKDIR /app

RUN apk add --no-cache curl git

ENV PATH="/venv/bin:$PATH"

COPY main.py /app
COPY --from=builder /app/venv /venv

CMD ["python", "/app/main.py"]
```

### DFC MCP server (Claude Code)

To build the MCP server that is included with DFC, access the project directory, then enter the `mcp-server` folder and run:

```shell
go build -o mcp-server .
```

To add the DFC MCP server to Claude Code **per project**, run:

```shell
claude mcp add dfc -- ~/dfc/mcp-server/mcp-server
```

To add the DFC MCP server to Claude Code **system-wide** for your user, run:

```shell
claude mcp add dfc -s user -- ~/dfc/mcp-server/mcp-server
```

After that, you'll be able to ask Claude to convert your Dockerfiles to use Chainguard Containers, and the task should be proxied through the DFC MCP server.

## Resources

- [Slide deck](/downloads/learning-lab-dfc-202508.pdf)
- [Getting Started with DFC Course](https://courses.chainguard.dev/getting-started-with-chainguards-dockerfile-converter)
- [DFC documentation](https://edu.chainguard.dev/chainguard/containers/migration/migration-tools/dockerfile-conversion/)
- [DFC on GitHub](https://github.com/chainguard-dev/dfc)