12
Small and secure Docker images for Rust: Alpine vs Debian vs Scratch (kerkour.com)
submitted 1 month ago by to c/rust@lemmy.ml
11 comments fedilink hide all child comments
 

Was recently somewhat surprised that you can't just copy a Rust executable into a ´scratch´ container and have it work, so this is a cool blog post to find in my RSS feed.

I'm guessing, if you're doing something less complex, then you just need the ´musl´ target and the allocator...

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 month ago (6 children)

Why would you build docker images for Rust? I mean if you’re renting containers from data centers or just want to run in a sandbox - sure… but rust binaries are statically linked which negates almost all other benefits of containers.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 2 points 1 month ago (5 children)

    Easier to deploy and manage for server use?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 month ago (4 children)

    That’s what I’m saying though - with statically linked binaries it’s just as easy to deploy the binary as it is the docker image.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 5 points 1 month ago (1 child)

    You're looking at it from the perspective of having coded a single application and wanting to deploy it. Try to think more like a sysadmin:

    • You've got a whole bunch of applications to deploy. Some of them may use dynamic linking, too.
    • You don't know any of them too intimately, so want to just prevent them from interfering with each other, unless you allow it.
    • You want a uniform tool to manage all these different applications, and especially also when they're allowed to interact.

    The result is deployment orchestration tools like Kubernetes, Docker Compose, Podman Compose etc.. And as a dev, you have to provide a container image, if you want to play along in those.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •