This repo contains container images for various services we use in our projects.
Some highlights:
A hardened Cribl container image.
- Uses the Distroless
cc-debian12base image. - Runs as a non-root user.
- The
/opt/cribldirectory is owned by the non-root user allowing for some flexibility.
- The
busyboxsystem utilities are installed.- Runs the s6-overlay process supervisor.
- The Cribl process is wrapped using a custom init handler for clean shutdown.
- Git is included as a statically compiled binary.