The small image problem seems like it may be best solved through volumes. Consider that busybox is just under 1MB when dynamically linked and installed. That's

The small image problem seems like it may be best solved through volumes. Consider that busybox is just under 1MB when dynamically linked and installed. That's roughly 50% larger than a distroless container. Further, distroless doesn't just target size for size's sake - it's also to ensure that an attacker in the container doesn't have tooling that they like to use. Instead if your containers are mounting a volume, say `/var/run/debug-tools/`, you could copy the tools into that mount before entering your containers. This probably has a good dev UX in that you can enter containers and have your tools, it amortizes the cost across your containers on a given host, and it isn't container specific ie: you perform one copy and now all containers on that host have it.