Hacker GitHub

← All repos

GoogleContainerTools/distroless

View on GitHub ↗ ★ 23,191 Starlark

🥑 Language focused docker images, minus the operating system.

77 mentions on Hacker News by 67 people: 12 stories, 65 comments · first 2017-06-09 · latest 2026-08-26

Mentions per year 77 mentions · busiest year 2022 (17)
20082026
AllStoriesComments NewestTopOldest
  1. …approach for both security and performance as well, albeit with limited language support: https://github.com/GoogleContainerTools/distroless
    comment by minimaxir · 2020-10-14 · in Dockerfile Security Best Practices
  2. …like you we could skip the docker shenanigans and just need a JRE to run our uber .jar (distroless https://github.com/GoogleContainerTools/distroless/tree/mast... makes a basic JVM docker container easy)
    comment by mustardo · 2020-06-16 · in Ask HN: What are your go to SaaS products for startups/MVPs?
  3. …but just to clarify a point you might not be making, don't put shells and SSH in your containers: https://github.com/GoogleContainerTools/distroless#why-shoul...
    comment by lstamour · 2020-02-28 · in Using BPF to Transform SSH Sessions into Structured Events
  4. …would be curious to see how these base images stack up against Google's "distroless" base images ( https://github.com/GoogleContainerTools/distroless ). I also appreciate that they call out Alpine's compatibility issues (on account of…
    comment by yjftsjthsd-h · 2020-02-19 · in Reducing Docker Image Size
  5. I would recommend multistage build but with distroless as final. https://github.com/GoogleContainerTools/distroless
    comment by dr01d · 2020-02-11 · in I Was Wrong about Nix
  6. …m/develop/develop-images/multistage-bu... [1]: https://hub.docker.com/_/scratch/?tab=description [2]: https://github.com/GoogleContainerTools/distroless [3]: https://github.com/golang/go/commit/62f0127d8104d8266d9a3fb5... [4]:…
    comment by hardwaresofton · 2020-02-11 · in I Was Wrong about Nix
  7. Most people would benefit from the distroless base image: https://github.com/GoogleContainerTools/distroless It's a base image with binaries from Debian deb package, and with necessary stuff like ca-certificates, and absolutely nothing…
    comment by yegle · 2019-12-10 · in Docker-slim: Minify your Docker container image without changing anything
  8. …problems, as well as musl causing issues with all sorts of nodejs build tools (bower, yarn). [1]: https://github.com/GoogleContainerTools/distroless
    comment by Fabricio20 · 2019-09-20 · in Kiss – A Linux distribution with a focus on “less is more”
  9. Distroless has debug images for this purpose: https://github.com/GoogleContainerTools/distroless/blob/mast...
    comment by ImJasonH · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  10. …to mention, you still need runtimes if you are programming in Java, Python or many other languages. https://github.com/GoogleContainerTools/distroless project gives a way to have these runtimes + their lib dependencies while still…
    comment by alpb · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  11. For anyone who want a small image but with glibc, https://github.com/GoogleContainerTools/distroless is a good choice, especially if you are writing in static linked language e.g. Go and Rust.
    comment by yegle · 2019-05-08 · in Alpine Linux Docker images have NULL for root password
  12. things like https://github.com/GoogleContainerTools/distroless should help to reduce the attack surface of your containers.
    comment by je42 · 2019-02-27 · in The most popular docker images each contain at least 30 vulnerabilities
  13. How about the Distroless containers from Google? https://github.com/GoogleContainerTools/distroless/blob/mast... .
    comment by tofflos · 2019-02-26 · in The most popular docker images each contain at least 30 vulnerabilities
  14. ▲ 4
    Distroless docker images
    story by tosh · 2018-12-19 · 0 comments
  15. ▲ 1
    Distroless: Language focused docker images, minus the operating system
    story by tomcam · 2018-11-14 · 0 comments
  16. There’s also google cloud’s distroless project: https://github.com/GoogleContainerTools/distroless We’ve used the Node.js containers in production and investigated the other languages, but never deployed them. We did have some issues with…
    comment by ajuhasz · 2018-11-14 · in Show HN: Smallest Node.js Docker images
  17. ▲ 2
    Language focused docker images, minus the operating system
    story by kristianp · 2018-07-12 · 0 comments
  18. …a really extreme stance where the production container has nothing superfluous, not even a shell. https://github.com/GoogleContainerTools/distroless
    comment by paulddraper · 2018-07-10 · in Introducing Jib — Build Java Docker images better
  19. ▲ 4
    “Distroless” Docker Images
    story by kristianp · 2018-07-10 · 0 comments
  20. Another option for even smaller images is to use distroless: https://github.com/GoogleContainerTools/distroless#examples-...
    comment by ImJasonH · 2018-05-14 · in How to start a Go project in 2018
  21. …- Our team has built something exactly like you're describing https://github.com/GoogleCloudPlatform/distroless Dockerfiles without RUN commands are technically more correct: reproducible, much easier to inspect. However
    comment by rckrd · 2018-04-16 · in Kaniko: Build container images in Kubernetes
  22. …example here! We have a test that uses container-structure-test to do exactly this over here: https://github.com/GoogleCloudPlatform/distroless/blob/1ea91... You can mix and match between tests that check file contents and tests that…
    comment by dlor · 2018-01-10 · in Container Structure Tests: Unit Tests for Docker Images
  23. ▲ 1
    “Distroless” Docker Images: Language focused docker images, minus the OS
    story by ingve · 2017-10-19 · 0 comments
  24. ▲ 89
    Distroless: Language focused docker images, minus the operating system
    story by jacobparker · 2017-10-06 · 36 comments
  25. Neat. Some overlap with https://github.com/GoogleCloudPlatform/distroless ; I think one big difference is that Google's approach uses bazel to download and unpack .debs, and this one uses standard Debian tools (debootstrap). But the end…
    comment by geofft · 2017-09-19 · in Minideb – A small image based on Debian designed for use in containers
  26. …image. The base images are built with bazel's docker rules[2], so you get reproducible builds. [1] https://github.com/GoogleCloudPlatform/distroless [2] https://github.com/bazelbuild/rules_docker
    comment by jonjonsonjr · 2017-09-02 · in Show HN: Compare local Docker images with ones in registry
  27. ▲ 3
    “Distroless” Docker Images
    story by Cherad · 2017-06-09 · 0 comments