Hacker GitHub

← All repos

GoogleContainerTools/distroless

View on GitHub ↗ ★ 23,191 Starlark

🥑 Language focused docker images, minus the operating system.

77 mentions on Hacker News by 67 people: 12 stories, 65 comments · first 2017-06-09 · latest 2026-08-26

Mentions per year 77 mentions · busiest year 2022 (17)
20082026
AllStoriesComments NewestTopOldest
  1. …m/develop/develop-images/multistage-bu... [1]: https://hub.docker.com/_/scratch/?tab=description [2]: https://github.com/GoogleContainerTools/distroless [3]: https://github.com/golang/go/commit/62f0127d8104d8266d9a3fb5... [4]:…
    comment by hardwaresofton · 2020-02-11 · in I Was Wrong about Nix
  2. Most people would benefit from the distroless base image: https://github.com/GoogleContainerTools/distroless It's a base image with binaries from Debian deb package, and with necessary stuff like ca-certificates, and absolutely nothing…
    comment by yegle · 2019-12-10 · in Docker-slim: Minify your Docker container image without changing anything
  3. …problems, as well as musl causing issues with all sorts of nodejs build tools (bower, yarn). [1]: https://github.com/GoogleContainerTools/distroless
    comment by Fabricio20 · 2019-09-20 · in Kiss – A Linux distribution with a focus on “less is more”
  4. Distroless has debug images for this purpose: https://github.com/GoogleContainerTools/distroless/blob/mast...
    comment by ImJasonH · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  5. …to mention, you still need runtimes if you are programming in Java, Python or many other languages. https://github.com/GoogleContainerTools/distroless project gives a way to have these runtimes + their lib dependencies while still…
    comment by alpb · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  6. For anyone who want a small image but with glibc, https://github.com/GoogleContainerTools/distroless is a good choice, especially if you are writing in static linked language e.g. Go and Rust.
    comment by yegle · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  7. things like https://github.com/GoogleContainerTools/distroless should help to reduce the attack surface of your containers.
    comment by je42 · 2019-02-27 · in The most popular docker images each contain at least 30 vulnerabilities
  8. How about the Distroless containers from Google? https://github.com/GoogleContainerTools/distroless/blob/mast... .
    comment by tofflos · 2019-02-26 · in The most popular docker images each contain at least 30 vulnerabilities
  9. There’s also google cloud’s distroless project: https://github.com/GoogleContainerTools/distroless We’ve used the Node.js containers in production and investigated the other languages, but never deployed them. We did have some issues with…
    comment by ajuhasz · 2018-11-14 · in Show HN: Smallest Node.js Docker images
  10. …a really extreme stance where the production container has nothing superfluous, not even a shell. https://github.com/GoogleContainerTools/distroless
    comment by paulddraper · 2018-07-10 · in Introducing Jib — Build Java Docker images better
  11. Another option for even smaller images is to use distroless: https://github.com/GoogleContainerTools/distroless#examples-...
    comment by ImJasonH · 2018-05-14 · in How to start a Go project in 2018
  12. …- Our team has built something exactly like you're describing https://github.com/GoogleCloudPlatform/distroless Dockerfiles without RUN commands are technically more correct: reproducible, much easier to inspect. However
    comment by rckrd · 2018-04-16 · in Kaniko: Build container images in Kubernetes
  13. …example here! We have a test that uses container-structure-test to do exactly this over here: https://github.com/GoogleCloudPlatform/distroless/blob/1ea91... You can mix and match between tests that check file contents and tests that…
    comment by dlor · 2018-01-10 · in Container Structure Tests: Unit Tests for Docker Images
  14. Neat. Some overlap with https://github.com/GoogleCloudPlatform/distroless ; I think one big difference is that Google's approach uses bazel to download and unpack .debs, and this one uses standard Debian tools (debootstrap). But the end…
    comment by geofft · 2017-09-19 · in Minideb – A small image based on Debian designed for use in containers
  15. …image. The base images are built with bazel's docker rules[2], so you get reproducible builds. [1] https://github.com/GoogleCloudPlatform/distroless [2] https://github.com/bazelbuild/rules_docker
    comment by jonjonsonjr · 2017-09-02 · in Show HN: Compare local Docker images with ones in registry