-
Notifications
You must be signed in to change notification settings - Fork 136
Description
Hello! Currently Ubuntu is used as base image for creating this container:
dnscrypt-server-docker/Dockerfile
Line 1 in 8ea0501
FROM ubuntu:24.04 |
The Ubuntu base image is pretty fat, meaning a larger attack surface, a bigger size (80MB vs for example Alpine with <10MB) as well as possibly slightly worse performance on resource-constrained systems like Raspberry Pi's (untested claim).
Have you considered using a slimmer base image like Alpine, Wolfi or Distroless (or even UBI)?
You switched from using Alpine to Ubuntu in 2019 because "Rust doesn't work well with musl-libc" (quote from the linked commit message). These issues seem to be largely resolved by now, there is also an official up-to-date Rust package in the Alpine package repository.
The other mentioned base images like Wolfi do not use musl
altogether.