Currently we are using
FROM quay.io/fedora/fedora:43
https://github.com/trusted-execution-clusters/operator/blob/main/Containerfile#L32
We could investigate other more lightweight final stage build layers, because all we have running is a rust binary (which needs minimal dependencies (glibc, openssl etc). We might not need a package manager or a shell (assuming we have a better observability platform and a better way to capture logs) etc.
Examples:
https://catalog.redhat.com/en/software/base-images
https://github.com/googlecontainertools/distroless
Currently we are using
FROM quay.io/fedora/fedora:43https://github.com/trusted-execution-clusters/operator/blob/main/Containerfile#L32
We could investigate other more lightweight final stage build layers, because all we have running is a rust binary (which needs minimal dependencies (glibc, openssl etc). We might not need a package manager or a shell (assuming we have a better observability platform and a better way to capture logs) etc.
Examples:
https://catalog.redhat.com/en/software/base-images
https://github.com/googlecontainertools/distroless