distroless – ITFROMZERO – Share tobe shared!

Using Chisel on Ubuntu: Building Ultra-Minimal Container Images for Enhanced Security

By admin June 19, 2026

Chisel is Canonical's tool for 'slicing' Ubuntu packages, extracting only the runtime files your container image actually needs. Combined with Docker multi-stage builds, image size can drop from 250MB to 45MB and CVE count from 47 to just 2.

Docker

Distroless Docker Images: Remove Unnecessary Shell and OS to Harden Container Security

By admin April 28, 2026

Google's Distroless Images strip the shell, package manager, and unnecessary OS components from Docker containers — significantly reducing the attack surface. This guide covers how to use multi-stage builds with Distroless for Go, Python, and Java, along with real-world vulnerability comparison and testing techniques.