Witchery: tools for building distroless images with alpine

Re:Witchery: tools for building distroless images with alpine by nikau on Thursday September 09, 2021 @09:34PM (#28476816)

Great, save some small amount of disk space in exchange for increasing operations complexity.

I'm sure the storage savings far outweigh the cost of extra more senior headcount required to troubleshoot issues on containers with no diagnostic tools installed.

[ Parent | on HN ]

Re:Witchery: tools for building distroless images with alpine by cyansmoker on Friday September 10, 2021 @01:29AM (#28478110)

Actually, it's a good practice to reduce the attack surface.

Diagnostic tools are easily made available by installing an ephemeral debug sidecar.

[ Parent | on HN ]

Re:Witchery: tools for building distroless images with alpine by nikau on Friday September 10, 2021 @03:13AM (#28478615)

So activate a feature gate for alpha status debug containers on a production cluster, sounds like good practice to me.

[ Parent | on HN ]