FRESH

Hacker News

Home

Minimus container images are now free

130 points by dimastopel

by charukiewicz

3 subcomments

Completely blocking the image information page to mobile user agents is completely unnecessary. I'd much rather look at your non optimized page than be told to come back on desktop.
Moreover, even after switching to desktop mode on my phone, there's nothing I see that precludes you from employing a little bit of CSS to make those pages render more nicely on mobile screens.

by hobofan

2 subcomments

Asking the very obvious question (as it's not apparent from the website): Why would I use this over DHI (Docker Hardened Images) or Chainguard Images, both of which also have a set of free hardened images?

by zufallsheld

1 subcomments

Where are these built? Can I see the Dockerfiles? How are they licensed? I get that they are free as in beer, but not libre/FLOSS?

by morellonet

5 subcomments

John here (CTO and Co-Founder)… we’d be happy to answer any questions anyone has!

by cedws

1 subcomments

Since we started paying for Chainguard I’ve become super sold on the benefits of minimal and continually patched images. It’s just a shame that the open source community only gets to benefit from the limited free library DHI and Chainguard offer. I understand it costs money though and that needs to come from somewhere.

by figassis

1 subcomments

The free tiers always go away, after they're deep in our infra. I would prefer to price it from the start.

by indigodaddy

1 subcomments

I'm interested in using these images on exe.dev. exe supports any oci images and stands it up as a microvm, in which it would be used non-ephemerally from that point. I'm assuming the images don't have any rc/services. How hard would it be to pull that back in after image deployment? (Also looks like I'd want to use the -dev images which include shell/apk, etc)

by biimugan

1 subcomments

What's the availability story? Docker Hub has pretty severe rate-limiting even if you're not an anonymous user.

by NoNameProvided

1 subcomments

In the risk reduction tab, it should compare the vulnerability count against the node-slim image. In my eyes, it takes away from the offering when they try to prop up the vuln count for the official images, and nobody deploys `node:latest`.

by euph0ria

1 subcomments

Thank you for this! Super valuable for contribution to all businesses. Suppose I want to add a custom PHP extension such as NewRelic, how would I go about adding that on your distroless images?

by csnoob

0 subcomment

Is the cli open source? What about the images themselves?
An easy comparison is wolfi, which is completely open source.

by crabique

2 subcomments

Is their ingress-nginx-controller image similar to that of Chainguard: a drop-in replacement with the CVEs fixed?

by rustyturtle

0 subcomment

used bitnami images and charts that depended on them, then they pulled them back after being bought by broadcom causing headaches. not getting bit by the rugpull again sorry.

by alfanick

1 subcomments

I truly don't get this. What is the security policy here? Why should I trust images built by minimus.io? How do I know they don't contain malicious software? What's the point?

by 2OEH8eoCRo0

2 subcomments

Supply chain attack waiting to happen

by concerned_ctzn

0 subcomment

good job!

by tamimio

3 subcomments

I have no idea what the heck is this, maybe it’s a great product but a very poor website in telling what I am getting into, is this better than the usual containers? How? Supported platforms? Can I run it on arm? The usuals

by tuananh

2 subcomments

this space is too crowded now. everyone is copying whatever Chainguard is doing
- Chainguard Images
- Chainguard Libraries
- Chainguard VM
...

by qwer123vbtf

0 subcomment

noice!

by Flingerthing

0 subcomment

[dead]