distroless

distroless copied to clipboard

- [ ] get riscv in rules_distroless (@thesayyn) - [ ] add images for debian13-(static, base, cc) - [ ] explore options for other languages

loosebazooka

python3 image seems to work with ctypes, docs say otherwise

3

**Describe the bug** The [docs](https://github.com/GoogleContainerTools/distroless/blob/main/python3/README.md) claim that ctypes is not supported. **To Reproduce** Using ctypes works just fine. Following some commands from the [official docs](https://docs.python.org/3/library/ctypes.html): Start a container: `docker run...

MShekow

feat: validate actions for merged-usr violations

2

Creates bazel validation actions for the debian13 targets to ensure that no layer violates the `merged-usr` conventions. This ensures both upstream debian packages and intermediate layers created by both distroless...

thesayyn

debian 13 to do

21

- [x] update bazel deps (except rules_oci) - [ ] update rules_oci - [ ] bazel 8.X - [x] merged usr fs - only for debian13 (not 12) - [...

loosebazooka

[proposal][node] Use system CA

4

Since its inception, nodejs has provided a built-in set of root certificates. Current versions of lines v22 and v24 allow to use system certificates: ```shell docker run --rm -e NODE_USE_SYSTEM_CA=1...

sosoba

Proposal: read-only filesystem in images?

5

When creating a distroless from a `build` container, for security I do `COPY --chmod=a-w` to make all my project files read-only, and later I use a volume on `/home/nonroot` to...

piranna

Proposal: Ruby 3.4.5 Distroless Example

2

### Context - Back in January 2018, Issue #156 asked: *“Add a Ruby distroless?”* That request was closed without resolution. ([#156](https://github.com/GoogleContainerTools/distroless/issues/156)) - Community members have created proof-of-concept images showing Ruby...

michael-lins