Skip to content

Use Distroless Base Images for flannel #2277

@avaneesh1232

Description

@avaneesh1232

I would like to propose using Distroless images as the base for the flannel image. This change would improve security by reducing the attack surface and result in smaller, more minimal images.

There are lot of OS and application level CVE's with Alpine being base image
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Alternatively, if needed we can have two variants one based on Alpine and one on Distroless, so users can choose the image that best fits their requirements.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions