Distroless Containers: Benefits, Implementation, and Real-world Migration

Learn about implementing distroless containers in a practical security context through this 16-minute conference talk from Security BSides London. Discover how to reduce attack surfaces, improve vulnerability scans, enhance isolation, and simplify supply chains using minimal, hardened containers without requiring extensive resources. Follow along as Will Dollman shares Sourcegraph's journey transitioning to distroless containers, exploring the fundamentals of building them from scratch, available tooling options, and valuable insights from migrating a complex SaaS application. Gain real-world perspectives on both successful strategies and unexpected challenges encountered during the implementation process.