Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(docker): create distroless final image #175

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

meysam81
Copy link

@meysam81 meysam81 commented Nov 2, 2024

Description

Distroless images have less vulnerabilities and are safer in production environments. Additionally, they will have no shell access and that reduces the attack surface even further.

ealen/echo-server:latest vulnerabilities

drawing

ealen/echo-server:local vulnerabilities

drawing

Usually, using distroless images also result in reduced final docker image size, however, in the case of ealen/echo-server, that resulted in excess of ~6MiB 🤷 👇

Comparing the size of the images

drawing

Related Issue

Motivation and Context

It will help further secure the software supply chain. Most of the people using the codes in this repository use it out of the box, without further modifications. This distroless final image will give them a good and sane default.

How Has This Been Tested

Yes, it is working and functional.

Types of changes

  • 🐛Bug fix (non-breaking change which fixes an issue)
  • 🚀New feature (non-breaking change which adds functionality)
  • ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have read the CONTRIBUTING document.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant