On Tue, Jul 30, 2019, at 3:52 PM, Daniel Walsh wrote:
> If you want small images, just use buildah.

Dockerfile-based multi-stage builds are significantly more popular than this 
and should really be mentioned first.

I'm not saying `buildah` is bad, but...what you're talking about here also 
encourages using the host as a build root which has various negatives.

And I think the main conversation to have is whether we should introduce 
something more like
https://github.com/GoogleContainerTools/distroless
that basically just has:

 - glibc
 - ca-certificates

Or to rephrase, a sufficient runtime for e.g. a Rust/golang binary and that's 
it.
(While people often say both Rust and golang are statically linked, that's true
 of the language code, but by default  Rust links to glibc, Go does not, and I
 think what Rust does is better and should be encouraged, so we want a libc
 in this "ultramin" container)
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to