4 ms·
You've forgotten one additional nuance - security. It's easier to look out for outdated/vulnerable components. A slim image also makes it quite a bit more annoy
by Avamander 3y ago
You've forgotten one additional nuance - security. It's easier to look out for outdated/vulnerable components. A slim image also makes it quite a bit more annoying for attackers, if you don't give them all the tools they need straight away.
- dharmab 3y agoThere's usually enough gadgets in slim images to infiltrate/exfiltrate, especially if you include package managers in your final image. Using a multi-stage build with a final image from scratch is a good practice where possible, especially now that you can attach debugging sidecar containers to your application as needed.