Hacker News new | ask | show | jobs
by excieve 2005 days ago
The closest approach to a first class "FROM scratch" is probably distroless[0].

> and a way to configure it to pull only from a local, private registry.

One can set up an air-gapped environment with access to a private container registry only.

[0] https://github.com/GoogleContainerTools/distroless