distribution / distribution-library-image

278 stars 176 forks source link

Registry image with distroless base #168

Open dimitar-kostadinov opened 4 months ago

dimitar-kostadinov commented 4 months ago

What would you like to be added: Rebase registry image to distroless or provide registry image variant registry:<version>-distroless with distroless as a base image.

Why is this needed: The motivation is to make the registry image thinner, safer and less vulnerable without redundant programs like shells, package managers, etc.

Тhe use of distroless as base image is already widespread in the K8S community. Ref: https://github.com/kubernetes/enhancements/blob/master/keps/sig-release/1729-rebase-images-to-distroless/README.md

IceCodeNew commented 4 months ago

https://images.chainguard.dev/directory/image/harbor-registry/specifications

there is already a distroless version of the registry image, you may take a look at it ;-)