Skip to content

Using Distroless for prod image

Alessandro Segala requested to merge ItalyPaleAle/commento:docker-update into master

This PR updates the production Docker image to use a "distroless" image.

If you're not familiar with "distroless" images: https://github.com/GoogleContainerTools/distroless In short, they contain just enough for the application to run, with nothing else. They allow incredibly small containers and the best security/isolation.

Currently, Docker images are built against Alpine 3.13, which is outdated, and they haven't been updated in years.

This PR will make updating base images less taxing.

Merge request reports