Hacker News new | past | comments | ask | show | jobs | submit login

You would. Except most statically linked binaries may still need ca-certificates, tzdata, and some other files that libraries expect it to be present on the system.

Not to mention, you still need runtimes if you are programming in Java, Python or many other languages. https://github.com/GoogleContainerTools/distroless project gives a way to have these runtimes + their lib dependencies while still maintaining a minimal attack surface.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: