Minimising your attack surface by building highly specialised docker images

Posted by finsterrific on Monday December 03, 2018 @11:33AM
from the medium.com dept.

https://medium.com/asos-techblog/minimising-your-attack-surface-by-building-highly-specialised-docker-images-example-for-net-b7bb177ab647

( 1 comment | 6 points | on HN )

Re:Minimising your attack surface by building highly special... by vegizombie on Monday December 03, 2018 @03:25PM (#18592559)

There are tools available to strip docker images down to a specified file list. By listing only the absolute minimum of files your application needs you can cut the surface down even further. Do you really need bash on the container for example?

[ Parent | on HN ]