News for hackers. Stuff that matters.
Re:Minify your container by tbabej on Wednesday August 03, 2022 @03:02PM (#32335554)
For workloads where the image size was critical, I have achieved a similar result with using strace to collect the required files and then limiting the image to only those files in the build process.

It's a neat approach, but ultimately brings non-negligible amount of uncertainty as you can never be 100% sure your test set of inputs did not miss a particular edge case which will require to have a file present in the container that no other input does.

Re:Minify your container by bigpod on Wednesday August 03, 2022 @03:05PM (#32335584)
yes that tends to be the problem with docker-slim as well that is why it includes flags like --include-path with which you can easily achive such fixes

personaly i highly recommend as it works in most cases and gets rid of those vulnerablities that come with things like bash or passwd that you dont need in prod apps