4 ms·
This isn’t a very useful comment. It’s about as useful as an empty container image by itself sure, it’s “distroless” and also has the fantastic property of hav
by orf 2y ago
This isn’t a very useful comment. It’s about as useful as an empty container image by itself
sure, it’s “distroless” and also has the fantastic property of having 0 security updates required forever, but surely you can see that the moment you add anything to it to yourself neither of those properties may apply.
- TZubiri 2y agothe security updates occur in the kernel, which is outside docker control. You are free to install an LTS or SLTS kernel :).
- orf 2y agoIn the first paragraph of the article that you’re commenting about: > These custom "distroless" Linux images are set to come with 12 years of security support for Linux, and any included open-source application or dependency within the container :)