Show HN: Minimal – Open-Source Community driven Hardened Container Images

Re:Show HN: Minimal – Open-Source Community driven Hardened ... by lmeyerov on Saturday January 31, 2026 @08:14PM (#46842670)

I have been curious on secure base images for the AI ecosystem, where we need to ship with cuda 11.8/12.8/13.1 for stability reasons, and in our case, a bit of the torch ecosystem and Nvidia rapids ecosystem. That ends up being... A lot. Extra fun: going all the way to FIPS..

[ Parent | on HN ]

Re:Show HN: Minimal – Open-Source Community driven Hardened ... by clawsyndicate on Sunday February 01, 2026 @03:34AM (#46844546)

we gave up on minimal images for this exact reason. the cuda/torch dependencies are just too massive to strip down effectively. in our case we rely on gVisor for isolation instead. with ~10k pods we treat the container as untrusted and enforce security at the runtime level via runsc.

[ Parent | on HN ]