Skip to content

Update distroless.md #23259

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
craig-osterhout merged 1 commit into from
Aug 20, 2025
Merged

Update distroless.md #23259

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions content/manuals/dhi/core-concepts/distroless.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ Images](../../docker-hub/image-library/trusted-content.md#verified-publisher-ima
follow similar best practices for minimalism and security but may not be as
stripped down to ensure compatibility with a wider range of use cases.

### What are minimal or distroless images?
## What are minimal or distroless images?

Traditional container images include a full OS, often more than what is needed
to run an application. In contrast, minimal or distroless images include only:
Expand All @@ -36,7 +36,7 @@ They typically exclude:
Docker Hardened Images are based on this model, ensuring a smaller and more
secure runtime surface.

### What you gain
## What you gain

| Benefit | Description |
|------------------------|-------------------------------------------------------------------------------|
Expand All @@ -45,7 +45,7 @@ secure runtime surface.
| Improved security | Lack of shell and package manager limits what attackers can do if compromised |
| Better compliance | Easier to audit and verify, especially with SBOMs and attestations |

### Addressing common tradeoffs
## Addressing common tradeoffs

Minimal and distroless images offer strong security benefits, but they can
change how you work with containers. Docker Hardened Images are designed to
Expand All @@ -60,7 +60,7 @@ maintain productivity while enhancing security.
By balancing minimalism with practical tooling, Docker Hardened Images support
modern development workflows without compromising on security or reliability.

### Best practices for using minimal images
## Best practices for using minimal images

- Use multi-stage builds to separate build-time and runtime environments
- Validate image behavior using CI pipelines, not interactive inspection
Expand Down