How to Pick an Optimal Node.js Docker Image 🧵
Assuming we want to use Node.js 22 (LTS), here are the main image candidates:
- node:22
- node:22-slim
- node:22-alpine
- bitnami/node:22
- chainguard/node:22
- gcr_io/distroless/nodejs22
How do you choose the most suitable image?
5
23
123
8,216
Nicholas Dille @nicholasdille.bsky.social retweeted
Whereabouts is an IP Address Management (IPAM) CNI plugin that assigns IP addresses cluster-wide
Whereabouts can be used for both IPv4 & IPv6 addressing
➜ github.com/k8snetworkplumbin…
We spent the last six months building GitHub Copilot Extensions to allow everyone to be able to build new experiences directly into Copilot. You can bring custom RAG based flows or multi step agents to the conversational experience. Please take a look! github.blog/2024-05-21-intro…
Idk who asked for this but I love it. For when you want to secure your exfil but OpenSSL isn't installed and all you have is bash.
github.com/gh2o/bash_tls/
New post about the interactive debugging in buildx (docker buildx debug) accelerating the implementation/debugging of a Dockerfile dille.name/blog/2024/05/14/d…
If you, like many, think relying just on `cat` command's output is enough to be sure about the integrity of a bash file. Think twice, you could get hacked. Read below 👇
72
475
3,458
945,922
Nicholas Dille @nicholasdille.bsky.social retweeted
Looking for folks who can test the Kubernetes v1.30 Release candidate rc.0 !!
Asking as we don't get enough feedback. There will be a rc.1 and rc.2 as well. Looking for those of you those have faced upgrade issues before specifically.
@kubernetesio@K8sContributors
1
27
51
14,534
Nicholas Dille @nicholasdille.bsky.social retweeted
The recording of my #kubecon keynote is out: youtu.be/S_Z4AHZlSUI
Thank you to everyone who attended, on the last day of a draining event. It was a special moment that I enjoyed very much, I hope you did too.
Non-french speakers: watch this after 😁 youtu.be/TEVzxycBBUU
6
27
164
30,649
Nicholas Dille @nicholasdille.bsky.social retweeted
💨 Are you curious how we patch CVEs so quickly?
@JordiMonPMM walks through how we patched three "silent" Golang CVEs in less than 24 hours in this blog: chainguard.dev/unchained/cha…
.@chainguard_dev CEO @lorenc_dan highlighted the lack of CPE matching to new vulnerabilities as being particularly problematic for organizations dependent on NVD data as part of their security efforts.