3 ms·
> Most containers are built on top of full OS images, with a full OS image's worth of vulnerabilities This is one of the problems DockerSlim (http://dockersl.i
by kylequest 11y ago
> Most containers are built on top of full OS images, with a full OS image's worth of vulnerabilities
This is one of the problems DockerSlim (http://dockersl.im http://dockersl.im) is trying to address. You take those containers built on full OS images and you remove everything your app is not using reducing the attack surface.