How did we end up with containers?

Re:How did we end up with containers? by conradev on Thursday April 05, 2018 @02:39PM (#16767719)

Removing as many layers as possible is one way to mitigate this: adding a static binary in a `FROM scratch` container, for example, where all libraries are compiled from sources that you verify the best you can.

[ Parent | on HN ]

Re:How did we end up with containers? by pm90 on Thursday April 05, 2018 @03:10PM (#16768018)

Love this comment. And especially with compiled languages like Go and the multiple build stages feature in Dockerfiles, this makes it incredibly easy to do just that.

[ Parent | on HN ]

Re:How did we end up with containers? by conradev on Thursday April 05, 2018 @11:52PM (#16770758)

One thing I forgot to mention is that you are still trusting trust – the builder needs to be verified for the output to be verified.

[ Parent | on HN ]