akoken/chiselled-ubuntu repository overview

⁠Chiselled Ubuntu

This repository contains distroless Chiselled Ubuntu 22.04 base container images.

⁠About

Chiselled Ubuntu containers seamlessly integrate the security benefits of Distroless with the robust features of Ubuntu, resulting in a highly efficient and secure containerization solution. By merging these elements, we achieve not only smaller container sizes but also an enhanced level of security.

The streamlined dimensions of the containers play a pivotal role in minimizing the potential attack surface, fortifying the overall security posture. Leveraging the reliability and content richness inherent in the Ubuntu distribution further amplifies the security prowess of chiselled Ubuntu. This amalgamation not only optimizes container resources but also ensures a substantial enhancement in the overall security landscape.

⁠Tags

• <version> as small as possible (no ssl or tzdata)
• <version>-ssl includes ssl (no tzdata)
• <version>-extra batteries included (includes ssl and tzdata)

⁠Usage

You'll discover a sample Dockerfile optimised for Rust:

FROM rust:1.74.1 as planner
WORKDIR /usr/local/src
RUN cargo install cargo-chef
COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM rust:1.74.1 as cacher
WORKDIR /usr/local/src
RUN cargo install cargo-chef
COPY --from=planner /usr/local/src/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json

FROM rust:1.74.1 as builder
COPY . /usr/local/src
WORKDIR /usr/local/src
COPY --from=cacher /usr/local/src/target target
COPY --from=cacher $CARGO_HOME $CARGO_HOME
RUN cargo build --release

FROM akoken/chiselled-ubuntu:0.8.1
COPY --from=builder /usr/local/src/target/release/myapp /usr/local/bin/myapp
WORKDIR /usr/local/bin
ENTRYPOINT [ "./myapp" ]