Build Distroless Containers with BuildKit on Kubernetes

**Build Distroless Containers with BuildKit on Kubernetes**

Introduction Production container images should include only the application binary and its runtime dependencies. A standard Debian or Ubuntu base image ships with a package manager, a shell, system utilities, and hundreds of libraries that your application never calls. Every one of those extra binaries increases image size, expands the container attack surface, and raises the number of CVEs that scanners flag on every build. Distroless container images solve this problem by stripping out everything except the application and its required runtime. Today, the Kubernetes project itself runs on distroless base images...

---

**[devsupporter 해설]**

이 기사는 DigitalOcean에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.