JIB and Distroless: shrinking sizes and vulnerabilities
summary
Project migrates from Dockerfiles to JIB and small base images Distroless, using grype and dive to audit results. Image size drops from ~760 MB to ~273 MB, package count from ~300 to 139 and reported vulnerabilities from ~500 (scanner) or 145 (DockerHub) to 39 with no criticals. Build time falls from ~2,840 hours/year to ~1,720 hours/year, cutting transfer/storage costs up to 60% and lowering delivery time; watch for JDK 21 and Debian base-image quirks.
AI-written summary · about
chapters (13)
- 0:00JIB and Distroless intro
- 2:33Speaker overview
- 4:00Who I am and my professional background
- 5:25JIB and Distroless images
- 8:42Current image problems
- 12:39Why JIB and Distroless
- 13:42Migration steps
- 16:13Dockerfile comparison
- 20:35Limitations
- 23:47Security and size results
- 26:43Cost and build improvements
- 29:16Project impact
- 31:08Q&A
related talks
39mA Journey to Distroless
30mSpeedy build for your java application images with JIB!
46mDockerfiles, Buildpacks, Jib and more, best way to run Java code in Containers?
27mDocker Image Journey - How to Shrink a Docker Image
47mMission Possible: The 45-Minute Path to Bullet-Proof Java Container Images
31mFast and Distroless Java in Containers: the Recipe!
40mBuilding Smaller Container Images
25mSpeedy build for your java application images with JIB!