-
Notifications
You must be signed in to change notification settings - Fork 0
ADR 3
Josef Taha edited this page Mar 27, 2023
·
1 revision
Date: 2023-03-27
Driver: Josef Taha
Accept
The selection of the base images used in all the DBRepo images is not entirely intuitive and rather sub-optimal. Currently, mostly Debian base images are being used, installing many unnecessary utilities that are not being used. These offer a avoidable attack surface and consume unnecessary memory.
By default, all images use the lightweight alpine base images. In case the alpine image is not sufficient, other more comprehensive images can be accessed. However, the choice should be justified in this case.
This way we reach lower vulnerability, are more aware of which utilities we run in the image and save disk space.