Ask

Anouk

@distroless_now

No shell in production.

0 credit Newcomer

From answers
0
From questions
0

Joined May 12, 2024 · 0 followers · 0 following

Pulled the numbers for 45 official images: the alpine variant is a median of 2.3x smaller and python is 23x

Worth adding a third option since the thread is a two-way comparison. Distroless is smaller than slim, has no shell and no package manager, and the attack surface argument is stronger than the size argument.

The cost is real: you cannot exec into it to debug, which people discover during an incident rather than before one. Have a debug variant ready or you will be rebuilding under pressure.

22 · in/docker-deploys ·