I Deleted 78% of my Redis Containers, and they Still Run!
summary
Claims an automated pipeline that trims container bloat by running a stub image with tracing while executing a short coverage script, then auto-building a hardened image via GitHub Actions and publishing to Docker Hub. Experiments remove 78% of Redis container contents, shrinking Redis from 102 MB to 22 MB, cutting vulnerabilities from 110 to 30 and packages from 112 to 20 (6,000 files to ~85). Demos show nginx and Redis still serve traffic, so the hardened images work.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:25Vinod Gupta
- 0:38Agenda
- 4:50Results after Deleting 78 Packages
- 7:39What Is Coverage Script
- 8:01How To Write a Coverage Script for Reddit
- 10:12Redis Bitnami Coverage Script
- 15:40How Can We Involve the Community To Help Add More Images
related talks
13mI Deleted 78% of my Redis Containers, and they Still Run!
50mContainer Attack Surface Reduction Beyond Name Space Isolation
34mHow to Lose a Container in 10 Minutes
35mSecuring Containers by Breaking In
26mContainerization crossroads: Experiences-Experiments-Expectations
29m5 Best Security Practices for your Production-Ready Containers
34mWhat We Learned Dissecting the World's Most Popular Containers
29m5 Security Best Practices For Production Ready Containers