TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Containers are bloated. We built a runtime tool to remove bloat and CVEs

4 点作者 ahmedaley3 个月前

1 comment

ahmedaley3 个月前
We are a bunch of academics who have worked on debloating tools for containers and we just released our code with an MIT license to Github: <a href="https:&#x2F;&#x2F;github.com&#x2F;negativa-ai&#x2F;BLAFS">https:&#x2F;&#x2F;github.com&#x2F;negativa-ai&#x2F;BLAFS</a><p>A full description of the work is here: <a href="https:&#x2F;&#x2F;arxiv.org&#x2F;abs&#x2F;2305.04641" rel="nofollow">https:&#x2F;&#x2F;arxiv.org&#x2F;abs&#x2F;2305.04641</a><p>We have tested the tool on many containers. For the top 20 pulled docker containers, the savings are up to 95% with all the containers working. We have done the same tests with slim-toolkit and it was only able to debloat 8 out of 20. We are looking at making this more automated for users.<p>Now, we only support docker, but we are working on podman and lXCs. We are also working on a version that guarantees generality (i.e., we give you 100% guarantees that your container will always work) with zero requirements to profile.<p>Please do try it and let us know what you think! All feedback is welcome!
评论 #43164396 未加载