DevOps and Docker Talk: Cloud Native Interviews and Tooling

Slim and Secure Container Images with Slim.ai


Listen Later

Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.


Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects.
 

Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.


Streamed live on YouTube on July 28, 2022. Includes demos.


Unedited live recording of this show on YouTube (Ep #180)


★Topics★
Docker Slim
Slim.ai


★Martin Wimpress★
Martin Wimpress on Twitter


★Pieter van Noordennen★
Pieter van Noordennen on Twitter


★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server DevOps Fans

Homepage bretfisher.com

  • (00:00) - DDT MAIN
  • (00:04) - Intro
  • (00:53) - Custom intro
  • (04:32) - Main show
  • (04:51) - How Slim.ai started
  • (07:07) - Complexities of shipping images
  • (08:53) - DockerSlim
  • (10:27) - Setting the stage for demo
  • (13:02) - Demo intro
  • (13:28) - Demo
  • (13:33) - Bret's Question
  • (22:20) - Different container composition options
  • (23:36) - Demo intro 2
  • (23:42) - Bret loves Docker Desktop and Extensions
  • (27:28) - Pausing Docker
  • (27:54) - The extension is the same as the SaaS
  • (28:30) - It's free
  • (29:03) - Demo?
  • (29:03) - Distroless and optimized starting points
  • (34:47) - Build engineering nightmare
  • (36:15) - Not just security considerations
  • (39:03) - Understanding dependency differences
  • (40:34) - Question
  • (42:03) - Slim cli
  • (46:08) - Getting started
  • (47:38) - Outro

  • You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

    Grab the best coupons for my Docker and Kubernetes courses.
    Join my cloud native DevOps community on Discord.
    Grab some merch at Bret's Loot Box
    Homepage bretfisher.com

    ...more
    View all episodesView all episodes
    Download on the App Store

    DevOps and Docker Talk: Cloud Native Interviews and ToolingBy Bret Fisher

    • 4.6
    • 4.6
    • 4.6
    • 4.6
    • 4.6

    4.6

    53 ratings


    More shows like DevOps and Docker Talk: Cloud Native Interviews and Tooling

    View all
    Software Engineering Radio - the podcast for professional software developers by se-radio@computer.org

    Software Engineering Radio - the podcast for professional software developers

    272 Listeners

    .NET Rocks! by Carl Franklin and Richard Campbell

    .NET Rocks!

    244 Listeners

    The Changelog: Software Development, Open Source by Changelog Media

    The Changelog: Software Development, Open Source

    284 Listeners

    The Cloudcast by Massive Studios

    The Cloudcast

    152 Listeners

    LINUX Unplugged by Jupiter Broadcasting

    LINUX Unplugged

    265 Listeners

    Thoughtworks Technology Podcast by Thoughtworks

    Thoughtworks Technology Podcast

    40 Listeners

    Talk Python To Me by Michael Kennedy

    Talk Python To Me

    590 Listeners

    Software Engineering Daily by Software Engineering Daily

    Software Engineering Daily

    621 Listeners

    AWS Podcast by Amazon Web Services

    AWS Podcast

    201 Listeners

    Python Bytes by Michael Kennedy and Brian Okken

    Python Bytes

    215 Listeners

    Data Engineering Podcast by Tobias Macey

    Data Engineering Podcast

    140 Listeners

    Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

    Syntax - Tasty Web Development Treats

    987 Listeners

    Kubernetes Podcast from Google by Abdel Sghiouar, Kaslin Fields

    Kubernetes Podcast from Google

    181 Listeners

    The Stack Overflow Podcast by The Stack Overflow Podcast

    The Stack Overflow Podcast

    62 Listeners

    The Real Python Podcast by Real Python

    The Real Python Podcast

    139 Listeners

    Agentic DevOps by Bret Fisher

    Agentic DevOps

    2 Listeners