Contribute to awslabs/soci-snapshotter development by creating an account on GitHub.

DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)...

generator object sync_do_slice at 0x7f9414464190...

When building Docker containers, you should be aware of the PID 1 zombie reaping problem. That problem can cause unexpected and obscure-looking issues when you least expect it. This article explains the PID 1 problem, explains how you can solve it, and presents a pre-built solution that you can use:

What is a container runtime shim? Why the shim is needed? How to use OCI container runtime (runc) in command line and from code.

This post explains the function that runtimes have in the process of designing, deploying, and maintaining a secure containerized environment.