DEV Community

Discussion on: Containers Under Attack

Collapse
 
rrampage profile image
Raunak Ramakrishnan

Many developers I know of prefer using ubuntu for a base image instead of the lighter alpine. Their logic is that in case you need to add more stuff later to the image, it is easy to modify Dockerfile to run apt-get because of the extensive repos and documentation for Ubuntu. On the other end of the spectrum are people shipping scratch containers which do not work on many environments. I think it is a balance between developer convenience and efficiency.

Collapse
 
exadra37 profile image
Paulo Renato

I agree with you that Ubuntu should not be used for a base image and more often than not Alpine is used because of the size not because of is excellent track record in security.

Scratch containers should be used only when you can release binaries for each platform you want to target.

Security should not be exchanged with convenience for benefit of developers.