Twitter | Search | |
Johannes Schnatterer 27 Apr 19
Holy 🐄! Just built my first image `FROM scratch` While only 7 MB (compressed), it contains a container w/ & 😮 Thx to and native images! Huge leap ahead for Java in containers & contexts!
Reply Retweet Like
Johannes Schnatterer
BTW Why do you rely on base image in the getting started guide and don't use the `--static` flag? IMO statically linked native images allow for using so much more smaller and more secure base images.
Reply Retweet Like More
Johannes Schnatterer 27 Apr 19
Replying to @QuarkusIO
One more thing: Wouldn't it be easier to get started with a self-contained docker image, without prerequisites like installing graalvm and running maven builds beforehand? I built one myself to get started: Maybe it's useful to someone else
Reply Retweet Like
Jason Greene 28 Apr 19
We could definitely slim it further, although going as far as —static is something we are still thinking about (you are welcome to join discussions!). For dns to work, a special glibc build with static dns is req., and we also are thinking about best practices for CVE updates 1/2
Reply Retweet Like
Jason Greene 28 Apr 19
Glibc is frequently patched for security hardening and layers are useful in detection / patch automation without requiring a native image rebuild. On the other hand, immediate transfer is a powerful benefit, and the update process is a solvable problem.
Reply Retweet Like