3 ms·
"Distroless docker image" We already have this from docker itself. https://hub.docker.com/_/scratch/ https://hub.docker.com/_/scratch/ I don't see how adding
by TZubiri 2y ago
"Distroless docker image"
We already have this from docker itself.
https://hub.docker.com/_/scratch/ https://hub.docker.com/_/scratch/
I don't see how adding cannonical to our minimalist null distro adds any value. The idea of minimalism is to take away. What would they be doing anyway?
Sounds like a corp just wanting to get in a business. Antithetical to the idea of removing everything but the kernel.
- never_inline 2y agoFrom scratch will not include CA certificates, timezone data etc.. which is necessary for some applications. Also Google has distroless images based on Debian for long time. Surely they have some use for it.
- wejick 2y agoIt's basically canonical is moving towards image building supply chain ala bitnami. We get trusted source to base image building and support from canonical.
- lostmsu 2y agoWhere are the old bitnami images now?
- ghostly_s 2y agoDoes Docker offer 12 years LTS?
- _cenw 2y ago"scratch" is an empty image, so you technically get support forever
- orf 2y agoThis isn’t a very useful comment. It’s about as useful as an empty container image by itself sure, it’s “distroless” and also has the fantastic property of having 0 security updates required forever, but surely you can see that the moment you add anything to it to yourself neither of those properties may apply.
- TZubiri 2y agothe security updates occur in the kernel, which is outside docker control. You are free to install an LTS or SLTS kernel :).
- orf 2y agoIn the first paragraph of the article that you’re commenting about: > These custom "distroless" Linux images are set to come with 12 years of security support for Linux, and any included open-source application or dependency within the container :)