Build Distroless Containers the Easy Way: From Full Fat To Featherweight With Unbase_oci
summary
unbase_oci takes a full Debian/Ubuntu-style image, exports both base and app roots, diffs files, resolves ELF linker dependencies inside the base, and rebuilds a single-layer OCI image that keeps only app files plus required libraries. Demo shows a multi-runtime nginx+Node+ffmpeg image shrinking by 86% of the base removed and ~85 MB reclaimed, implemented as a Bash wrapper invoking a minifier container, works with OCI archives and Podman import/export, supports include/exclude lists.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:25Distroless containers benefits
- 3:53Manual distroless challenges
- 4:57unbase OCI approach
- 7:27Live demo unbase OCI
- 11:01Size reduction analysis
- 13:08How unbase OCI works
- 16:39unbase OCI use cases
- 18:26Manual vs unbase OCI
- 19:13Q&A
related talks
40mBuilding Smaller Container Images
36mBuild a Container Image from Scratch
14mSmall Containers? or Small Images?
39mA Journey to Distroless
40m"Willy Wonka and the Secure Container Factory"
55mRecipes and Runtimes: Making Sense of Containers in 2026
51mBuilding Container Images with OpenEmbedded and the Yocto Project
44mThe Containerization of the Operating System: Exploring Bootc and the Future of Linux Deployment