3 ms·
just the file system is hardly enough for debugging
by nsonha 2y ago
just the file system is hardly enough for debugging
- nine_k 2y agoProcesses in a container are just normal processes. But if your container lacks gdb or strace or whatever other tools, you can bring them in.
- lrvick 2y agoYou can inject any binaries you want into a process namespace. Shipping debug tools, a package manager, or even a shell in a production container is increasing attack surface and image size for no reason. Do not ship dev tooling to prod. Pull and attach it on demand only. Servers and containers should be immutable appliances.