Technology · Ebook

SlimToolkit: Minify and Harden Your Container Images

by Shriira Press

SlimToolkit, formerly DockerSlim, is a free and open-source CNCF sandbox project that inspects, minifies, and secures container images without changing your code or Dockerfile. It pairs static analysis of an image with dynamic analysis that runs the container and watches what it actually touches, then builds a new image containing only what was needed. This book covers why images bloat, what SlimToolkit is and where it fits, the master-and-sensor engine behind its analysis, the build command that minifies an image, the xray and lint commands for inspection and auditing, the automatic generation of seccomp and AppArmor security profiles, and how to fold it all into real CI pipelines and everyday workflows.

Contents

1. 1Preface
2. 2Chapter 1 — The Weight of a Container
3. 3Chapter 2 — What SlimToolkit Is
4. 4Chapter 3 — Inside the Engine
5. 5Chapter 4 — Minifying with Build
6. 6Chapter 5 — Inspecting with Xray and Lint
7. 7Chapter 6 — Hardening with Security Profiles
8. 8Chapter 7 — SlimToolkit in Practice