News for hackers. Stuff that matters.

A comment on Docker Image Vulnerability Research. Parent comment

Re:Docker Image Vulnerability Research by jsulinski on Tuesday March 14, 2017 @03:38PM (#13870782)
CentOS/RHEL have a very small footprint in the open source community, it seems. I was pretty surprised by this because they have such significant corporate backing, a lot of enterprise software is RHEL only, and they may be the only linux distribution currently support SCAP (required by FISMA for federal agencies).

In order, I would opt for: binary image, alpine, then debian. There are other choices like CoreOS, FreeBSD, etc. if you are comfortable moving away from linux.

[ Parent | on HN ]
Re:Docker Image Vulnerability Research by daveguy on Tuesday March 14, 2017 @05:35PM (#13871665)
CoreOS, the distribution, is a Linux distribution. They also have a lot of container oriented tools. The distro itself is optimized for use in container management. It is also relatively lightweight for use as a container (but not as light as Alpine).
[ Parent | on HN ]
Re:Docker Image Vulnerability Research by jsulinski on Tuesday March 14, 2017 @05:40PM (#13871708)
Good point. What I meant was comfort moving away from a major distribution.

NixOS is another distro that looks interesting.

[ Parent | on HN ]