What is the difference between `docker commit` and writing a Dockerfile?

`docker commit` snapshots a running container's current state into a new image, but the result is undocumented and non-reproducible (no record of how it got that way). A Dockerfile is a declarative, version-controllable, reproducible recipe; production images should always come from Dockerfiles, with `commit` reserved for quick ad hoc debugging snapshots.