You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Current »

Overview

"Distroless" images contain only your application and its runtime dependencies. They do not contain package managers, shells or any other programs you would expect to find in a standard Linux distribution.


Default Users

Usersidgroup
root

nonroot

65532

65532


To define the nonroot user in a kubernetes pod/deployment you will need to set the securityContext as defined below:

spec:
  template:
    spec:
      securityContext:
        runAsUser: 65532
        fsGroup: 65532


Example Creating a Docker Image for Go Application 


# Start by building the application.
FROM golang:1.18 as build

WORKDIR /go/src/app
COPY . .

RUN go mod download
RUN CGO_ENABLED=0 go build -o /go/bin/app

# Now copy it into our base image.
FROM gcr.io/distroless/static-debian11
COPY --from=build /go/bin/app /
CMD ["/app"]


References

ReferenceURL
"Distroless" Container Imageshttps://github.com/GoogleContainerTools/distroless
How to add a directory where non-root user can write #427https://github.com/GoogleContainerTools/distroless/issues/427
  • No labels