I was thinking about how to minimise the size of a container image and realised: you can allow read only access to the host libraries 🤯

This extends the idea of distroless images even further as now the distro doesn't need to be bundled in even for dynamically linked binaries.

This of course has some downsides: less isolation and possibly greater security risk, as the container now has access to more code (although you could mount only the needed libs).
It also means this breaks the idea that you can just pull and run an image: now you need to figure out what to mount and where for it to work.

But I think it is insanely cool that you can do this and there are times where even the size of a small distro can make a difference (especially if you multiply that size many times over).

I also wonder if it means you can go back to patching your OS security libraries (libssl and the like) and restart your container to fix security risks, instead of having to rebuild and redeploy every container.

#containers #rustlang (because I was playing with a rust project when I thought of this)

Ubuntu 26.10 may trim GRUB in Secure Boot, dropping ZFS, Btrfs, LUKS and RAID, requiring unencrypted ext4 /boot or unsigned builds 🔐
Ubuntu 26.04 LTS beta ships Linux 7.0, GNOME 50 and Mesa 26, updating desktop, graphics and container stacks ⚙️
App Center now shows and manages Deb packages again, improving transparency but keeping Snap-first defaults 📦

🔗 https://itsfoss.com/news/ubuntu-26-10-grub-overhaul/

#TechNews #Ubuntu #Linux #OpenSource #FOSS #Debian #Snap #GNOME #Kernel #Security #Containers #Software #Freedom #Tech

Incus 6.23 arrives as the final 6.x release before 7.0 LTS, bringing security fixes, new features, and improved VM and storage capabilities.
https://linuxiac.com/incus-6-23-container-and-virtual-machine-manager-released/

#virtualization #containers #opensource

Talk almost ready – Chemnitz Linux Days, here we go! 💻🐧

Putting the final touches on my talk – tomorrow it’s time. ⏰

Chemnitz Linux Days 2026, I’m all set and excited to be there. 🙉

30+ slides on Podman in rootless mode in combination with Quadlets are ready – even though this topic really only scratches the surface. 📚

#chemnitzerlinuxtage #podman #rootless #linux #containers #quadlets

CVE Alert: CVE-2026-30892 - containers - crun - https://www.redpacketsecurity.com/cve-alert-cve-2026-30892-containers-crun/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-30892 #containers #crun

⚡️ Part 1 clearly struck a nerve. Part 2 is out! https://hypha.pub/back-to-freebsd-part-2

#FreeBSD #jails #containers #lxc

Zenithal - a native macOS app for Docker and Kubernetes management.

Real-time container monitoring, Docker Compose orchestration with visual service graphs, Compose Builder, Kubernetes integration, Trivy security scanning, and built-in terminal.

Works alongside any Docker runtime -Docker Desktop, Colima, OrbStack, etc. It doesn't replace your runtime, just gives you a better interface.

empiricapps.com/zenithal/download

#docker #kubernetes #macos #devtools #containers #swiftui #devops