News for hackers. Stuff that matters.

A comment on Alpine Linux Docker images have NULL for root password. Parent comment

Re:Alpine Linux Docker images have NULL for root password by matthewbauer on Wednesday May 08, 2019 @06:41PM (#19863633)
Not the certificates though, unless you do some special tricks. I think GP is probably thinking of kerberos/NSS, which has a plugin system that requires dynamic linking.
[ Parent | on HN ]
Re:Alpine Linux Docker images have NULL for root password by yegle on Wednesday May 08, 2019 @08:04PM (#19864152)
There are two basic flavors of distroless image, one is base, the other one is static.

The `static` image is very bare minimal and only contains things like nsswitch.conf and ca certificates. This is the recommended base image for statically linked languages.

There's also a `base` image that I usually use as the base image of C programs, e.g. stunnel/unbound DNS. In those cases, I usually use Debian Stretch as build environment (distroless uses binary from Debian stable, so ABI is compatible), build a dynamically linked binary, then copy the result binary along with all dynamic object files to a distroless base image.

So when I talk about openssl in the image, I was referring to the `base` flavor. If you are happy with the provided openssl version, the openssl in the base image is indeed useful.

[ Parent | on HN ]