This image contains a minimal Linux, glibc-based system. It is intended for use directly by "mostly-statically compiled" languages like Go, Rust or D.
Statically compiled applications (Go) that do not require libc can use the gcr.io/distroless/static image, which contains:
- ca-certificates
- A /etc/passwd entry for a root user
- A /tmp directory
- tzdata
Applications that require libc but do not need libssl can use the gcr.io/distroless/base-nossl, which contains all
of the packages in gcr.io/distroless/static, and
- glibc
Most other applications (and Go apps that require libc/cgo) should start with gcr.io/distroless/base, which contains all
of the packages in gcr.io/distroless/static, and
- glibc
- libssl
- for Debian 13 or later, libssl dependencies (zlib, libzstd) are also included.
Note: Debian 13 base image does not include OpenSSL legacy algorithms.
If you want to use them, you will need to add openssl-legacy-provider yourself.
Users are expected to include their compiled application and set the correct cmd in their image.