Full reproducibility isn't easy, there is a cost to it. However the payoff is rather significant so if you can temper that cost a bit and make it less inconven

Full reproducibility isn't easy, there is a cost to it. However the payoff is rather significant so if you can temper that cost a bit and make it less inconvenient to achieve then you have a winning solution. I have cooked this up based on Bazel, rules_oci and rules_distroless: https://github.com/josephglanville/images https://github.com/josephglanville/images Specifically this file is a busybox based image with some utilities included from a Debian snapshot: https://github.com/josephglanville/images/blob/master/toolbox/BUILD.bazel https://github.com/josephglanville/images/blob/master/toolbo... More difficult than Dockerfile? Sure. However better in pretty much every way otherwise including actual simplicity.