Skip to content

Support Distroless base image based BE container for enhanced security and reduces size #373

@rameshpolishetti

Description

@rameshpolishetti

Context

When building a container images, developers often start with a base image which includes a full OS. OR one might use a base image that contains a light weight Linux distribution. However, most applications doesn't require whole features of that distribution. Distroless images offer a way to include only what is required i.e. application and its direct dependencies. These images effectively reduce the attack surface by excluding unnecessary tools, binaries, shell, etc.. this will also reduce that overall size of the container.

Evaluate following images as a base image for BE container:

https://docs.docker.com/build/building/base-images/#create-a-minimal-base-image-using-scratch

https://catalog.redhat.com/software/base-images
Refer to micro images.

Alternatives
NA

Has the feature been requested before?
NA

If the feature request is approved, would you be willing to submit a PR?
Yes

Metadata

Metadata

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions