News for hackers. Stuff that matters.
Re:The Deletion of Docker.io/Bitnami by morellonet on Thursday August 28, 2025 @08:56AM (#45051606)
If you’re looking for an alternative here, we (the team that built Twistlock) launched Minimus a few months ago to provide near zero CVE images built continuously from source. We have long experience in this space (we even wrote NIST SP 800-190) and I’d love to talk if we could help anyone. We also have drop in replacement images and charts for Bitnami, as we describe here: https://www.minimus.io/post/the-bitnami-pricing-changes-what...

If anyone has tech questions about how it all works, tools we use, customer scenarios, etc I’d be happy to discuss.

Re:The Deletion of Docker.io/Bitnami by mdaniel on Thursday August 28, 2025 @11:03AM (#45053091)
Also, this form is nonsensical https://www.minimus.io/get-started#signup-form because it distinguishes between "Individual" and "Organization" but then Company is a mandatory field. Maybe just go ahead and label it "Lead Gen / Ask For A Demo"
Re:The Deletion of Docker.io/Bitnami by mdaniel on Tuesday September 02, 2025 @10:58AM (#45103962)
Not that anyone cares, but I can confirm this is the case: the response is an email from some marketing person asking to "have a call" and then a few days later my email gets some random spam from being subscribed to every mailing list they own. What a farce
Re:The Deletion of Docker.io/Bitnami by CubsFan1060 on Thursday August 28, 2025 @10:38AM (#45052737)
The main question as always is price. I was also interested in things like Chainguard and Docker secure images until I had a sales call with them and found out the price.

I can’t seem to find the price anywhere on your site… I assume the reason for that is that it’s also nearly impossible for a non-fortune 500 to afford?

Re:The Deletion of Docker.io/Bitnami by morellonet on Thursday August 28, 2025 @01:08PM (#45054537)
Nope - we're early stage so we're really flexible not just on pricing but licensing terms too. We have many customers that are smaller startups, not just typical F500 types.
Re:The Deletion of Docker.io/Bitnami by mdaniel on Thursday August 28, 2025 @11:00AM (#45053063)
Please offer an implementation of the docker-credential helper, just like chainguard does with docker-credential-cgr[1], and don't put throwaway text that says "docker supports credential stores, so good luck to you" on your website https://docs.minimus.io/foundations/authentication#using-a-c...

1: https://edu.chainguard.dev/chainguard/chainguard-images/chai...

Re:The Deletion of Docker.io/Bitnami by morellonet on Thursday August 28, 2025 @01:13PM (#45054591)
It's on the roadmap :)

It's a good feature, just hasn't been prioritized so far because customers haven't really had trouble with the current basic approach.

Re:The Deletion of Docker.io/Bitnami by carrodher on Thursday August 28, 2025 @01:36PM (#45054839)
Let me rewrite the comparison used in the "Example: Using Bitnami vs. Minimus" section of the blog post:

Using Bitnami Secure Images: You pull a versioned PostgreSQL image built on a minimal-attack-surface OS (Photon). When a CVE is disclosed or a new upstream version is released, Bitnami’s automation takes care of everything: a new container image (and Helm chart, if applicable) is built, tested, and published to your registry within hours. All you need to do is update to the latest version; no manual CVE monitoring, triage, or patching required.

Re:The Deletion of Docker.io/Bitnami by Beltran on Friday August 29, 2025 @11:00AM (#45065026)
Is Minimus OS? Bitnami continues as OS project and anyone can build the images from source.