Post

BIG NEWS from BellSoft: we have introduced Hardened Container Images! These are minimized images with immutable component set, up to 95% fewer CVEs and a single SLA from one team that covers OS, runtime, and vulnerability management ➡️ bell-sw.com/bellsoft-har...

bell-sw.comBellSoft Hardened Images - Near Zero CVE Container Images | BellSoft JavaDeploy secure minimized container images with near-zero CVEs. BellSoft Hardened Images deliver continuous security monitoring, continuous rebuilds, and easy compliance.

0 reposts3 likes

Is it recommended to use these new images even if `bellsoft/liberica-runtime-container:jre-25_37-musl` is already used? I compared the size and it's almost identical 48MB vs 45MB.

These images come with hardened security, but equal performance, so yes, I would recommend using them as you get double the benefit! Note that they are also immutable, so installing additional packages in the final image will not be an option :)

It addresses the same headache in a better way. Simply put, CVE management and technical support for OS and runtime come from the same vendor. Single accountability - we stay behind our product. But there is more: migrating Java workloads to our hardened images saves up to 30% disk and ram usage.