Slim(toolkit)

It was great chatting with you about containers, security and #SlimToolkit / #DockerSlim :) Looking forward for your podcast to come out! Thank you for inviting me @pabpereza

An early preview of the @SlimToolkit playground (blame me if something is not working yet :-)) in the awesome @iximiuz Labs (also try the interactive mode by typing 'slim' without any parameters and you'll get nice flag auto-completes including --target, which let's you search the images you have): labs.iximiuz.com/playgrounds…

Debugging minimal container images without a shell using the "debug" command in @SlimToolkit is pretty convenient too. Gives you an optional "direct" mode where you don't need to go through the "proc" file system. Supports Docker & Kubernetes. Native Podman support is coming soon

There's now a #golang library for EPSS ! github.com/slimtoolkit/slim/… It has a lower level API interface and a higher level client. Will share a sample project soon or you can take a look at how @SlimToolkit is using it :)

Here's the same with @SlimToolkit (it 'dumps' in the current directory the file(s) that match the path pattern): slim xray --changes all --change-path dump:.:/usr/local/bin/kubectl raesene/alpine-containertools

Happy to do a demo for 'debug'. It's more valuable in the interactive prompt mode where it will help you auto-complete many parameters (e.g., ks8 namespace, pod, etc). It also has a nice built-in list of debug images you can use/select. And there's a mode for a better 'attach' UX

1000 commits for @SlimToolkit / #DockerSlim finally :-)

Speaking of @containerd ... I'll be hacking on the MVP for containerd support in @SlimToolkit / #DockerSlim at #AWSreInvent next week & hope to bump into people from the Finch team to do a PoC potentially. @estesp do you know who might be around at the conference?

What's that new #Dagger module ;) You can find out in a few minutes during the @dagger_io Community Call in a few minutes :)

@solomonstre is doing a @Dagger_io module for @SlimToolkit in @BretFisher 's podcast right now youtube.com/watch?v=RgE7Y2Lv…

First year (& 1st time) for @SlimToolkit at #KubeCon as a #CNCF project Thank you everyone who stopped by the Project Pavilion! Great discussions! The project sessions was a good idea too but most attendees didn't know about them. @KubeCon_ wonder if we can do something next year

First version of the @SlimToolkit module for @dagger_io on @solomonstre 's laptop with tons of help from @kylepenfound . Thank you guys for doing most of the work!

Turns out @SlimToolkit has stickers! Get yours when you stop by the Project Pavilion (look for the big sign or Z32)

It'll be pretty easy to find @SlimToolkit / #DockerSlim in the Project Pavilion at #KubeCon :-)

There's a @SlimToolkit / #DockerSlim session today (1pm-2pm) at #KubeCon Location: Hilton, Auburn room. Skybridge to Hilton (level 3, KubeCon registration level). Look towards the escalator (when you got your badge) & you should see the big sign below (lower left). See you there!

If you are attending #KubeCon in Chicago & want to see the vulnerabilities disappear with other vulnerability scanners (Trivy, Snyk, Docker Scout, Sysdig, OSV-Scanner) stop by the @SlimToolkit stand in the Pavilion (also around for that at #Rejekts2023 tomorrow)

One more thing for the #Rejekts2023 demo... See how all vulnerabilities disappeared 2324 -> 0 (same image + @SlimToolkit magic... catch me in the hall if you want to know how) @mauilion you should appreciate the fun behind it :-)

I'll be showing how you can use @SlimToolkit / #DockerSlim to do static and runtime forensics, vulnerability scanner evasion and attack surface reduction with containers at the upcoming SecTor (a Blackhat event in Toronto at the end of this month). Should be fun :)