3 ms·
Docker doesn’t even need a whole OS overlay if your project doesn’t call for it. It’s pretty easy to take a Go app for example and just include it in a scratch
by cestith 5mo ago
Docker doesn’t even need a whole OS overlay if your project doesn’t call for it. It’s pretty easy to take a Go app for example and just include it in a scratch container.
- gchamonlive 5mo agoGood catch! With statically linked binaries you can ship them in a FROM scratch image.
- danudey 5mo agoWe do this with some of our published images. RedHat complains because our images aren't 'based on UBI', which would add dozens or hundreds of CVEs.