kubecon24/content/day4/01_container_images.md

367 B

title weight
TODO: 1

Problems

  • Dockerfiles are hard and not 100% reproducible
  • Buildpoacks are reproducible but result in large single-arch images
  • Nix has multiple ways of doing things

Solutions

  • Degger as a CI solution
  • Multistage docker images with distroless -> Small image, small attack surcface
  • Language specific solutions (ki, jib)