vegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 days agoMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square101fedilinkarrow-up1408cross-posted to: linux@sh.itjust.workscybersecurity@infosec.publinux@lemmy.world
arrow-up1408external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 days agomessage-square101fedilinkcross-posted to: linux@sh.itjust.workscybersecurity@infosec.publinux@lemmy.world
minus-squaredan@upvote.aulinkfedilinkEnglisharrow-up6·edit-21 day agoNot just rootless and read-only, but distroless/chiseled too. There’s no reason to have unneeded parts of an OS in your Docker containers. It should just be one app along with any libraries it needs (or just statically compile the app)
minus-squareMonkderVierte@lemmy.ziplinkfedilinkEnglisharrow-up3·1 day agohttps://wiki.alpinelinux.org/wiki/Runc#Set_up_a_minimal_container
Not just rootless and read-only, but distroless/chiseled too. There’s no reason to have unneeded parts of an OS in your Docker containers. It should just be one app along with any libraries it needs (or just statically compile the app)
https://wiki.alpinelinux.org/wiki/Runc#Set_up_a_minimal_container