vegeta@lemmy.world to Technology@lemmy.worldEnglish · 23 hours agoMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square66fedilinkarrow-up1334arrow-down17
arrow-up1327arrow-down1external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 23 hours agomessage-square66fedilink
minus-squaredan@upvote.aulinkfedilinkEnglisharrow-up5·edit-215 hours agoNot just rootless and read-only, but distroless/chiseled too. There’s no reason to have unneeded parts of an OS in your Docker containers. It should just be one app along with any libraries it needs (or just statically compile the app)
minus-squareMonkderVierte@lemmy.ziplinkfedilinkEnglisharrow-up2·13 hours agohttps://wiki.alpinelinux.org/wiki/Runc#Set_up_a_minimal_container
Not just rootless and read-only, but distroless/chiseled too. There’s no reason to have unneeded parts of an OS in your Docker containers. It should just be one app along with any libraries it needs (or just statically compile the app)
https://wiki.alpinelinux.org/wiki/Runc#Set_up_a_minimal_container