advancedTop 100 Interview Questions

What does a distroless image remove compared to a minimal distro like Alpine?

Distroless removes the shell, package manager, and most other OS utilities, leaving essentially just the application and its runtime dependencies — Alpine retains a shell (via BusyBox) and a package manager, which is convenient for debugging but expands the attack surface available to anyone who achieves code execution.

Ready to master this question?

Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.

Sign in to generate a response

Next Step

Continue to Why is image scanning (e.g., Trivy, Grype) part of a secure CI/CD pipeline?← Back to all Docker questions