Container base images with glibc & musl

Ship It! Cloud, SRE, Platform Engineering

In today’s episode, we talk about distroless, ko, apko, melange, musl and glibc. The context is Wolfi OS, a community Linux OS designed for the container and cloud-native era. If you are looking for the lightest possible container base image with 0 CVEs and both glibc and musl support, Wolfi OS & the related chainguard-images are worth checking out.

Ariadne Conill is an Alpine Linux TSC member & Software Engineer at Chainguard.

Join the discussion

Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• Sentry – Working code means happy customers. That’s exactly why teams choose Sentry. From error tracking to performance monitoring, Sentry helps teams see what actually matters, resolve problems quicker, and learn continuously about their applications - from the frontend to the backend. Use the code CHANGELOG and get the team plan free for three months.
• FireHydrant – The reliability platform for every developer. Incidents impact everyone, not just SREs. FireHydrant gives teams the tools to maintain service catalogs, respond to incidents, communicate through status pages, and learn with retrospectives. Small teams up to 10 people can get started for free with all FireHydrant features included. No credit card required to sign up. Learn more at firehydrant.com/
• Sourcegraph – Transform your code into a queryable database to create customizable visual dashboards in seconds. Sourcegraph recently launched Code Insights — now you can track what really matters to you and your team in your codebase. See how other teams are using this awesome feature at about.sourcegraph.com/code-insights

Featuring:

• Ariadne Conill – Website, GitHub, LinkedIn, X
• Gerhard Lazu – Website, GitHub, LinkedIn, X

Show Notes:

• Ariadne’s Twitter thread that kick-started this episode
• Wolfi OS - a stripped-down distro designed for the cloud-native era
• Minimal Container images from Chainguard
• ko - build and deploy Go applications on Kubernetes
• apko Overview - build OCI images using APK directly
• melange - build APKs from source code
• musl libc
• glibc - GNU C library
• “We discovered a bug in our repository management service”

Something missing or broken? PRs welcome!

פרקים

1. Welcome (00:00:00)

2. Sponsor: Sentry (00:01:00)

https://sentry.io/demo/sandbox/

3. Intro (00:01:40)

4. Apk vs Apko (00:06:54)

5. Building with Apk (00:11:32)

6. Apko and Ko (00:14:53)

7. Sponsor: FireHydrant (00:20:16)

https://firehydrant.com/

8. Wolfi OS in Chainguard (00:21:34)

9. Musl and Glibc (00:26:07)

10. DNS (00:32:13)

11. Musl Developement team (00:34:24)

12. Chainguard kernel (00:35:12)

13. Do you like rust? (00:37:40)

14. Rust in Linux (00:42:39)

15. Sponsor: Sourcegraph (00:44:41)

https://info.sourcegraph.com/changelog

16. Witchery (00:47:04)

17. Host opperating system (00:51:33)

18. The bug (00:53:45)

19. Publishing images (00:55:59)

20. Platform support for ??? (00:59:00)

21. KubeCon (01:00:02)

22. Wrap up (01:01:39)

23. Outro (01:02:20)