logoalt Hacker News

tonyhart7 • 01/21/2025 • 1 reply • view on HN

for containerization??? what security feature they ship???

I use distroless for shipping the code (low mem traces)


Replies

ruthmarx • 01/21/2025

> for containerization???

No, as my main OS on my laptop and any other computers. I had better luck and a better experience over Void and Artix, and I'm not interested in systemd based distros.

> what security feature they ship???

The focus on minimization is a security feature given it reduces attack surface area. I'd say embrace musl wholeheartedly is another (as an example, Alpine sshd wasn't vulnerable to that big remote root vuln from last year). They have a general commitment to security as a priority that I don't think most distros share, which I appreciate.

➕ show 2 replies