alt Hacker NewsI wasn't aware of that. So I guess it's generally better to just use plain debian images and just install the required packages with apt.
I wasn't aware of that. So I guess it's generally better to just use plain debian images and just install the required packages with apt.
There are different approaches and it all comes down to who you trust. I don't think there's universal answer. If you have money, find image provider who's serious about security and hopefully they'll provide patches images quickly. Otherwise using Debian packages is a good default I think.
Honestly I don't even understand why so many docker images prefer to build software from sources, rather than just installing them from debian repositories.