While Docker is now the main way to distribute backend software and CLI tools, you may be wondering how to build minimal and secure Docker images for your Rust projects.

Was recently somewhat surprised that you can’t just copy a Rust executable into a ´scratch´ container and have it work, so this is a cool blog post to find in my RSS feed.

I’m guessing, if you’re doing something less complex, then you just need the ´musl´ target and the allocator…

  • jldevezas
    3·
    11 days ago

    Because most images from Chainguard are paid, apart from the base image, the way I use it is through multi-stage builds, where I simply copy what I need from other images into the wolfi base, unless of course it’s just easier to install what I want using apk. If I could do that with plain Alpine, I would, but most stuff is compiled for glibc, so it’s a no-go.

    If security is the main factor for your, I’d recommend you scan the image with grype, so you can get a grasp of how many CVEs you’re working with.