Re:Dive: A tool for exploring a Docker image, layer contents...
by fishpen0 on Monday January 08, 2024 @04:14PM
(#38918218)
Less performance and more security. Lots of ameteur images use a secret file or inadvertently store a secret to a layer without realizing an rm or other process in another layer doesn't actually eliminate it. If the final step of your build squashes the filesystem flat again you can remove a lot of potentially exposed metadata and secrets stored in intermediate layers
[ Parent
| on HN ]
There are no comments on this comment yet.