Alpine vs. Distroless: Choosing Your Minimalist Base
·
Updated:
Alpine gives you a shell and apk; Distroless gives you nothing but the app. Compare attack surface, image size, and multi-stage build complexity.
Tag: container security
All the articles with the tag "container security".
Distroless Images: When Minimal Goes Too Far
Distroless containers are tiny, secure, and loved by security teams — until you need to debug one at 2 AM. Here's when Google distroless actually pays off vs when it's just container hipster points.
Distroless: How to Build Slim, Secure Containers
Distroless images contain only your app and its runtime — no shell, no package manager, no attack surface. Here's how to build them.
AppArmor vs SELinux: Mandatory Access Control Without the Existential Dread
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
Running Docker Containers as Non-Root (And Why You Should)
Running as root in containers is a security foot-gun. Learn the USER instruction and numeric UID/GID pattern.