3 ms·
For even smaller images that are always deterministic/reproducible with a multi-party signed supply chain, check out https://stagex.tools https://stagex.tools
by lrvick 11mo ago
For even smaller images that are always deterministic/reproducible with a multi-party signed supply chain, check out https://stagex.tools https://stagex.tools
- abound 11mo agoMight want to disclose that you built it. Also, I took a quick look and I don't understand how your tool could possibly produce "even smaller images". The article is using multi-stage builds to produce a final Docker image that is quite literally just the target binary in question (based on the scratch image), whereas your tool appears be a whole Linux distribution.
- lrvick 11mo agoI am one of the maintainers at this point, fair. This would be a much smaller drop in replacement for the base images used in the post to give full source bootstrapped final binaries. You can still from scratch for the final layer though of course and that would be unlikely to change size much though, to your point.