distribution-library-image icon indicating copy to clipboard operation
distribution-library-image copied to clipboard

Registry image with distroless base

Open dimitar-kostadinov opened this issue 1 year ago • 2 comments
trafficstars

What would you like to be added: Rebase registry image to distroless or provide registry image variant registry:<version>-distroless with distroless as a base image.

Why is this needed: The motivation is to make the registry image thinner, safer and less vulnerable without redundant programs like shells, package managers, etc.

Тhe use of distroless as base image is already widespread in the K8S community. Ref: https://github.com/kubernetes/enhancements/blob/master/keps/sig-release/1729-rebase-images-to-distroless/README.md

dimitar-kostadinov avatar Jun 04 '24 14:06 dimitar-kostadinov

https://images.chainguard.dev/directory/image/harbor-registry/specifications

there is already a distroless version of the registry image, you may take a look at it ;-)

IceCodeNew avatar Jun 06 '24 15:06 IceCodeNew

We're not against making registry image distroless. Maybe open a PR and we can discuss it?

milosgajdos avatar Dec 19 '24 15:12 milosgajdos