Google's distroless is good but it's still based on a traditional OS (Debian) which in turn, relying on traditional OS release cadence. It's also hard to extend. In this talk, I will talk about how we (VPBank) adopted Wolfi OS and built a set of secured container images for all our application workload. 0 CVE is not a myth. It's actually achievable.
See the slides: https://drive.google.com/file/d/1mJYz...
Speaker(s):
Tuan-Anh Tran
Connect with us:
OpenInfra Twitter: / openinfradev
OpenInfra LinkedIn: / openinfra-foundation
OpenInfra Facebook: / openinfradev
OpenInfra Website: https://openinfra.dev/