News for hackers. Stuff that matters.
Re:Alpine Linux Docker images have NULL for root password by sofaofthedamned on Wednesday May 08, 2019 @03:54PM (#19862272)
No, it's not. With samepage merging it's nothing, let alone docker only loading the image once.
Re:Alpine Linux Docker images have NULL for root password by atombender on Wednesday May 08, 2019 @07:36PM (#19863995)
This assumes everyone is on exactly the same version. Larger organizations can afford to appoint SREs who can institute a broad range of security and optimization policies (including "all apps should use the same Alpine base image version") and enforce them programmatically as well as ensure that apps are continually updated to match them. That kind of thing is expensive, resource-wise, for smaller organizations.
Re:Alpine Linux Docker images have NULL for root password by peterwwillis on Wednesday May 08, 2019 @10:05PM (#19864744)
I'm not talking about image waste, I'm talking a single box with a half dozen different base image versions and a slew of extra packages thrown in. Every app built against glibc is going to get bigger, and not all Ubuntu packages are built with small size in mind. Compare these systems with Ubuntu vs Alpine base images and the average size for an Ubuntu ecosystem is substantially larger.