Slim and Secure Container Images with Slim.ai
Download MP3Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.
💥 This episode is brought to you by our valued sponsor and friends at Veritas!💥
Have you thought about the potential risks to your Kubernetes cluster in this era of sophisticated ransomware? Veritas offers unparalleled resilience for stateful Kubernetes applications, providing high availability and robust data protection.
Learn how to fortify your business-critical applications with Veritas at https://vrt.as/kubernetes.
Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.
Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects.
Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.
Streamed live on YouTube on July 28, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #180)
★Topics★
Docker Slim
Slim.ai
★Martin Wimpress★
Martin Wimpress on Twitter
★Pieter van Noordennen★
Pieter van Noordennen on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects.
Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.
Streamed live on YouTube on July 28, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #180)
★Topics★
Docker Slim
Slim.ai
★Martin Wimpress★
Martin Wimpress on Twitter
★Pieter van Noordennen★
Pieter van Noordennen on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server DevOps Fans
Homepage bretfisher.com
- (00:00) - DDT MAIN
- (00:41) - Intro
- (01:30) - Custom intro
- (05:09) - Main show
- (05:28) - How Slim.ai started
- (07:44) - Complexities of shipping images
- (09:30) - DockerSlim
- (11:04) - Setting the stage for demo
- (13:39) - Demo intro
- (14:05) - Demo
- (14:10) - Bret's Question
- (22:57) - Different container composition options
- (24:13) - Demo intro 2
- (24:19) - Bret loves Docker Desktop and Extensions
- (28:05) - Pausing Docker
- (28:31) - The extension is the same as the SaaS
- (29:07) - It's free
- (29:40) - Demo?
- (29:40) - Distroless and optimized starting points
- (35:24) - Build engineering nightmare
- (36:52) - Not just security considerations
- (39:40) - Understanding dependency differences
- (41:11) - Question
- (42:40) - Slim cli
- (46:45) - Getting started
- (48:15) - Outro
You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!
Grab the best coupons for my Docker and Kubernetes courses.
Get on the waitlist for my next live course on CI automation and gitops deployments.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators and Guests
Host
Bret Fisher
Cloud native DevOps Dude. Course creator, YouTuber, Podcaster. People person who spends way to much time in front of a computer.
Producer
Beth Fisher
Producer of DevOps and Docker Talk podcast since 2019. Assistant producer on Bret Fisher Live show on YouTube. Business and proposal writer by trade.
