logoalt Hacker News

ramon156today at 1:19 PM2 repliesview on HN

The question was "why over DHI?"

1 and 2 are not a reason

3. no X, no Y, also not a reason

4. `rg agents`. Right


Replies

morellonettoday at 1:25 PM

Not sure what you mean… we have more images than DHI, we have FIPS images available freely, and all our images are built from source on a distroless base. These are just objective facts.

The build from source on distroless approach provides a meaningful advantage re attack surface and CVEs versus DHI images. You don’t have to take our word for it, just pull some images and scan with Trivy or Grype or whatever you prefer.

yjftsjthsd-htoday at 1:58 PM

3 is exactly the reason I've never bothered to try docker's offering; that definitely is a reason

show 1 reply