Hacker News Reader

> and even bare containers.

Strange, i thought the whole point of containers was to solve this problem.

The whole point of containers is to ship almost the whole OS with the application (It is a technical implementation of the "works on my machine" concept). If the OS you put in your container (by just pulling in a prebuilt image from somewhere) doesn't have the necessary things, then the application would fail to work just the same as if you ran it on the bare operating system with the the same missing libraries.

Depends how much you care about the size and security footprint of your container images.

Static linking doesn't solve security issues either.

Static linking can be a layer of defence against some security issues, depending on your circumstances.

But what I said was "reduced security footprint", considering the trade offs between a single statically linked binary and a full (or even cut down) Linux distribution.

Reply on news.ycombinator.com