Container Hardening with Paketo and Wolfi
Talkat Cloud Foundry Day North America 2024 · on Wednesday, 2024-05-15· at 11:00· Education Center, 2nd Floor·
summary
Build process uses Wolfi CVE-free base image and Paketo Buildpacks with pack CLI to produce a Maven Java OCI image; prerequisites are pack and Docker, steps create a Wolfi-based build image and a separate Wolfi run image, then a builder.toml ties them together. The demo builds and runs a simple Java app successfully, claims the final image is smaller and more secure than a docker build with a Jammy base, and shows how to customize builders and pack ordering.
AI-written summary · about
related talks
31mBuildpacks: Pragmatic Solutions To Quick and Secure Image Builds
30mBuilding minimal images with Wolfi OS, declaratively with melange and apko
49mSecure Container Images with Chainguard's Tooling: Melange, Apko & Wolfi
47mMission Possible: The 45-Minute Path to Bullet-Proof Java Container Images
36mClosing the Developer Experience Gap of your Container Platforms
30mRootless, Reproducible, and Hermetic: Secure Container Build Showdown
39mA Journey to Distroless
22mUsing Buildpacks To Reduce Container Bloat and Attack Surface