Skip to content

feat(build): Switch to docker hardened image#6117

Open
Dav1dde wants to merge 1 commit into
masterfrom
dav1d/dhi
Open

feat(build): Switch to docker hardened image#6117
Dav1dde wants to merge 1 commit into
masterfrom
dav1d/dhi

Conversation

@Dav1dde

@Dav1dde Dav1dde commented Jun 22, 2026

Copy link
Copy Markdown
Member

See: getsentry/rfcs#157 (Rendered)

Switches from distroless to dhi. This is now possible because we no longer link against libstdc++ since relay-crash is gone.

└─ % llvm-readelf --needed-libs relay
NeededLibraries [
  ld-linux-x86-64.so.2
  libc.so.6
  libgcc_s.so.1
  libm.so.6
]

Another nice upside - ~13 MiB smaller:

REPOSITORY                TAG                                        IMAGE ID       CREATED          SIZE
ghcr.io/getsentry/relay   52824874f1c376153f43c04cb4924f63305ca489   9c24a95c0bda   22 minutes ago   83.8MB
ghcr.io/getsentry/relay   8421d6859682657eaa8cc183166cbf6e568eebd1   2529bda2f319   4 hours ago      96.4MB

@Dav1dde Dav1dde closed this Jun 22, 2026
@Dav1dde Dav1dde reopened this Jul 7, 2026
@Dav1dde Dav1dde force-pushed the dav1d/dhi branch 3 times, most recently from 1053725 to 7744e86 Compare July 7, 2026 18:24
@Dav1dde Dav1dde marked this pull request as ready for review July 7, 2026 18:49
@Dav1dde Dav1dde requested a review from a team as a code owner July 7, 2026 18:49
@Dav1dde Dav1dde self-assigned this Jul 7, 2026
@Dav1dde Dav1dde added the Trigger: Full-CI Runs all CI steps in a PR label Jul 7, 2026
Comment thread Dockerfile.release
@Dav1dde Dav1dde changed the title ref(docker): Switch to docker hardened image feat(build): Switch to docker hardened image Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Trigger: Full-CI Runs all CI steps in a PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants