Slim(toolkit)

Inspect, minify and debug your containers. Slim reduces the attack surface of your containers and it also generates security profiles for them.

[Slim(toolkit) @SlimToolkit]

will be posting about #DockerSlim / #SlimToolkit exclusively on my own account, @kcqon , now that I have the check mark. so much easier to post when you have no limits :)

[Kyle Q (the DockerSlim guy) @kcqon]

It was great chatting with you about containers, security and #SlimToolkit / #DockerSlim :) Looking forward for your podcast to come out! Thank you for inviting me @pabpereza

[Kyle Q (the DockerSlim guy) @kcqon]

An early preview of the @SlimToolkit playground (blame me if something is not working yet :-)) in the awesome @iximiuz Labs (also try the interactive mode by typing 'slim' without any parameters and you'll get nice flag auto-completes including --target, which let's you search the images you have): https://t.co/vxz0TrNkGt

[Kyle Q (the DockerSlim guy) @kcqon]

@sudomateo Debugging minimal container images without a shell using the "debug" command in @SlimToolkit is pretty convenient too. Gives you an optional "direct" mode where you don't need to go through the "proc" file system. Supports Docker & Kubernetes. Native Podman support is coming soon

[Kyle Q (the DockerSlim guy) @kcqon]

There's now a #golang library for EPSS ! https://t.co/4G1tEvtpuS It has a lower level API interface and a higher level client. Will share a sample project soon or you can take a look at how @SlimToolkit is using it :)

[Kyle Q (the DockerSlim guy) @kcqon]

@raesene Here's the same with @SlimToolkit (it 'dumps' in the current directory the file(s) that match the path pattern): slim xray --changes all --change-path dump:.:/usr/local/bin/kubectl raesene/alpine-containertools

[Dagger @dagger_io]

Explore container optimization with a demo by @kcqon! 🚀 See a new Dagger module in action, leveraging the SlimToolkit to efficiently reduce container sizes. #TechNews #Innovation

https://t.co/SGOq5VitQ0

[Kyle Q (the DockerSlim guy) @kcqon]

@IamMatteoBisi @SlimToolkit Happy to do a demo for 'debug'. It's more valuable in the interactive prompt mode where it will help you auto-complete many parameters (e.g., ks8 namespace, pod, etc). It also has a nice built-in list of debug images you can use/select. And there's a mode for a better 'attach' UX

[Kyle Q (the DockerSlim guy) @kcqon]

1000 commits for @SlimToolkit / #DockerSlim finally :-)

[Kyle Q (the DockerSlim guy) @kcqon]

Speaking of @containerd ... I'll be hacking on the MVP for containerd support in @SlimToolkit / #DockerSlim at #AWSreInvent next week & hope to bump into people from the Finch team to do a PoC potentially. @estesp do you know who might be around at the conference?

[Kyle Q (the DockerSlim guy) @kcqon]

What's that new #Dagger module ;) You can find out in a few minutes during the @dagger_io Community Call in a few minutes :)

[Kyle Q (the DockerSlim guy) @kcqon]

@solomonstre is doing a @Dagger_io module for @SlimToolkit in @BretFisher 's podcast right now https://t.co/lZ7UXyeWjZ

[Kyle Q (the DockerSlim guy) @kcqon]

First year (& 1st time) for @SlimToolkit at #KubeCon as a #CNCF project Thank you everyone who stopped by the Project Pavilion! Great discussions! The project sessions was a good idea too but most attendees didn't know about them. @KubeCon_ wonder if we can do something next year

[Kyle Q (the DockerSlim guy) @kcqon]

First version of the @SlimToolkit module for @dagger_io on @solomonstre 's laptop with tons of help from @kylepenfound . Thank you guys for doing most of the work!

[Kyle Q (the DockerSlim guy) @kcqon]

Turns out @SlimToolkit has stickers! Get yours when you stop by the Project Pavilion (look for the big sign or Z32)

[Kyle Q (the DockerSlim guy) @kcqon]

It'll be pretty easy to find @SlimToolkit / #DockerSlim in the Project Pavilion at #KubeCon :-)

[Kyle Q (the DockerSlim guy) @kcqon]

There's a @SlimToolkit / #DockerSlim session today (1pm-2pm) at #KubeCon Location: Hilton, Auburn room. Skybridge to Hilton (level 3, KubeCon registration level). Look towards the escalator (when you got your badge) & you should see the big sign below (lower left). See you there!

[Kyle Q (the DockerSlim guy) @kcqon]

If you are attending #KubeCon in Chicago & want to see the vulnerabilities disappear with other vulnerability scanners (Trivy, Snyk, Docker Scout, Sysdig, OSV-Scanner) stop by the @SlimToolkit stand in the Pavilion (also around for that at #Rejekts2023 tomorrow)

[Ed Sim @edsim]

@SlimToolkit from @SlimDevOps is simply magic - from 2324 vulnerabilities in your image to 0

[Kyle Q (the DockerSlim guy) @kcqon]

One more thing for the #Rejekts2023 demo... See how all vulnerabilities disappeared 2324 -> 0 (same image + @SlimToolkit magic... catch me in the hall if you want to know how) @mauilion you should appreciate the fun behind it :-)