You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Overview

"Distroless" images contain only your application and its runtime dependencies. They do not contain package managers, shells or any other programs you would expect to find in a standard Linux distribution.


Default Users

Usersidgroup
root

nonroot
65532
65532


To define the nonroot user in a kubernetes pod/deployment you will need to set the securityContext as defined below:

spec:
  template:
    spec:
      securityContext:
        runAsUser: 65532
        fsGroup: 65532


References

ReferenceURL
"Distroless" Container Imageshttps://github.com/GoogleContainerTools/distroless
How to add a directory where non-root user can write #427https://github.com/GoogleContainerTools/distroless/issues/427
  • No labels