You can inject any binaries you want into a process namespace. Shipping debug tools, a package manager, or even a shell in a production container is increasing

You can inject any binaries you want into a process namespace. Shipping debug tools, a package manager, or even a shell in a production container is increasing attack surface and image size for no reason. Do not ship dev tooling to prod. Pull and attach it on demand only. Servers and containers should be immutable appliances.