Lean and Mean Docker containers
lego
Our great sponsors
Lean and Mean Docker containers | lego | |
---|---|---|
38 | 53 | |
18,071 | 7,184 | |
1.5% | 6.7% | |
9.1 | 8.9 | |
4 days ago | 2 days ago | |
Go | Go | |
Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Lean and Mean Docker containers
-
An Overview of Kubernetes Security Projects at KubeCon Europe 2023
Slim.ai presents the data in a more user friendly way than many of the other tools in this post. On top of its open source SlimToolkit for identifying the contents of an image, Slim.ai uses Trivy for vulnerability scanning.
-
Tips for reducing Docker image size
What about https://github.com/slimtoolkit/slim?
-
Standard container sizes
Anyone tried using https://github.com/docker-slim/docker-slim To minify an image?..
- A practical approach to structuring Golang applications
-
M1: Docker doesn't find shared x64 shared objects even though platform was specified
Distroless images are better left for people with serious need for lightweight images and good Linux knowledge because they require lot of planning with the build so that they stay light and work. If you need lighter images but docker isn't your main tool and you can't afford to take hours and hours of practicing different build strategies you can check docker-slim (https://dockersl.im/). With this tool you can easily size down the images.
-
I deleted 78% of my Redis container and it still works
Maybe this would help in that regard: https://github.com/docker-slim/docker-slim
-
Are there tools that tell you if you can optimize your dockerfiles?
I have heard of slim.ai, there core tool is open source https://github.com/docker-slim/docker-slim
- We're optimizing our Docker image and we're pretty happy with how it's going: 3.37GB > 1.13GB. Next stop, a single Docker image Budibase deployment 🚀
-
Ask HN: Who is hiring? (April 2022)
* We have a lightweight engineering process based on trust, self-alignment and visibility.
Email me at [email protected] if you'd like to learn more.
P.S.
Take a look at DockerSlim ( https://github.com/docker-slim/docker-slim ) if you are interested in working on the open source project that powers our SaaS.
-
Down With the Sickness
In last weeks blog I talked about what my plan was for release 2.9. My main areas of concern was finishing the migration to make use of the images stored in our Docker registry. The other area I was planning on taking on was to slim down those images in the registry by using Docker-Slim.
lego
-
Running one’s own root Certificate Authority in 2023
This ACME client looks promising, but I haven’t tried it yet: https://github.com/go-acme/lego
-
Where do you get/setup certificates from for your https/ssl?
Caddy where possible, and acme.sh or lego where not.
- Acme.sh runs arbitrary commands from a remote server
-
How do you renew SSL certificates?
Depend on host's capability... - lego - dehydrated - caddy - in case it already works as a web server, it will automatically issue and renew certs
-
LeGo CertHub v0.9.0 with Docker Support
I don't know enough Go to understand if this project actually makes use of the official Lego library (https://github.com/go-acme/lego) because it already has support for acmedns (https://github.com/go-acme/lego/tree/master/providers/dns/acmedns) and it would be great if legocerthub could be extended to just benefit from all of that existing work.
u/gregtwallace maybe in the short term until you write your own, you could provide a hook into one of the many ACME client implementations which do DNS-01 and support the majority of major DNS provider APIs out of the box? That would make your (really great!) project much more widely usable.
-
LeGo CertHub - Centralized Let's Encrypt
It's named after https://github.com/go-acme/lego it seems, which has been around for a while.
-
Introducing lers: an async, user-friendly Let's Encrypt/ACMEv2 library
lers is an async, user-friendly Let's Encrypt/ACMEv2 library inspired by acme2, acme-micro, and lego.
-
How to configure and use acme-dns?
If there is no specific need to use acme-dns then just make it all much simpler and create your LE certs with the lego tool and then copy the cert files to whatever applications you want to use them with.
-
Can DynDNS work for the 'www.example.com' at the same time, or just for 'example.com'
For example LetsEncrypt supports wildcard certificates. Can easily be generated with a tool like lego.
What are some alternatives?
letsencrypt - Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
acme.sh - A pure Unix shell script implementing ACME client protocol
acme-dns - Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.
autocert - [mirror] Go supplementary cryptography libraries
acmetool - :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
minideb - A small image based on Debian designed for use in containers
Go random string generator - Flexible and customizable random string generator
dive - A tool for exploring each layer in a docker image
pipx - Install and Run Python Applications in Isolated Environments
gophish - Open-Source Phishing Toolkit
ACL - A simple but powerful Access Control List manager
go-acl - Go support for Access Control Lists