News for hackers. Stuff that matters.

A comment on Optimizing Docker image size and why it matters. Parent comment

Re:Optimizing Docker image size and why it matters by gravypod on Thursday January 06, 2022 @02:46PM (#29828901)
There are some tools that allow you to copy debug tools into a container when needed. I think all that needs to be I'm the container is tar and it runs `kubectl exec ... tar` in the container. This allows you to get in when needed but still keep your production attack surface low.

Either way as long as all your containers share the same base layer it doesn't really matter since they will be deduplicate.

[ Parent | on HN ]
Re:Optimizing Docker image size and why it matters by theptip on Thursday January 06, 2022 @03:27PM (#29829564)
I believe “Ephemeral containers” are intended to resolve this issue; you can attach a “debug container” to your pod with a shell and other tools.

https://kubernetes.io/docs/concepts/workloads/pods/ephemeral...

Still beta, I haven’t tried it yet myself. Looks interesting though.

[ Parent | on HN ]