Re:The sad state of sysadmin in the age of containers
by retrogradeorbit on Thursday April 23, 2015 @05:21AM
(#9425606)
And how do you "simply vet a base image"?
[ Parent
| on HN ]
Re:The sad state of sysadmin in the age of containers
by garthk on Thursday April 23, 2015 @07:46PM
(#9430640)
Same as everything: look at how it was built. Many of the images are built by CI systems according to Dockerfiles and scripts maintained in public GitHub repos. Audit those, then use them yourself if you're worried about the integrity of the services and systems between the code and the repository.