4 ms·
Cool project! Detecting installed packages and checking against known vulnerabilities is definitely useful. A similar feature is on the todo list for DockerSlim
by kylequest 11y ago
Cool project! Detecting installed packages and checking against known vulnerabilities is definitely useful. A similar feature is on the todo list for DockerSlim[1], so it'll be nice to reuse relevant bits and pieces.
[1]DockerSlim was a recent Docker Hack Day project. The goal is to make Docker containers lean and mean :) It analyzes existing images and then creates much smaller images throwing away stuff you don't need.
- jzelinskie 11y agoThat's really cool. It sounds similar to Squashed Image support on Quay.io[0]. Is it open source? [0]: https://blog.quay.io/New-quay-features/ https://blog.quay.io/New-quay-features/
- kylequest 11y agoYes, it is open sourced. I think it's different though. It looks like the "squashed image" feature flattens an image. DockerSlim tries to extract only the artifacts the application needs, so it can turn a 431 MB image into a 14 MB image (just an example, not always possible with every application type). DockerSlim relies on runtime analysis to shrink images that much.
- russell_h 11y agoNeat. Reminds me a little of this: https://github.com/mafintosh/torrent-docker https://github.com/mafintosh/torrent-docker