distribution-library-image
distribution-library-image copied to clipboard
Registry image with distroless base
What would you like to be added:
Rebase registry image to distroless or provide registry image variant registry:<version>-distroless with distroless as a base image.
Why is this needed:
The motivation is to make the registry image thinner, safer and less vulnerable without redundant programs like shells, package managers, etc.
Тhe use of distroless as base image is already widespread in the K8S community. Ref: https://github.com/kubernetes/enhancements/blob/master/keps/sig-release/1729-rebase-images-to-distroless/README.md
https://images.chainguard.dev/directory/image/harbor-registry/specifications
there is already a distroless version of the registry image, you may take a look at it ;-)
We're not against making registry image distroless. Maybe open a PR and we can discuss it?