DevOps
Running Rust Containers as a Non Root User Safely Explained
Containers run as root by default. Create an unprivileged user in the image, own only what the app writes, handle low ports and volumes, and check that it works.
3 min read
Tag
docker
5 posts
DevOps
Rust Docker Builds That Recompile Everything and the Fix
Why a one-line change recompiles every crate in Docker, and the fixes in order of effort: copy order, a dummy main trick, cargo-chef, BuildKit cache mounts and a pinned base.
3 min read
DevOps
Static Linking Rust for Scratch Images With Musl Explained
Build a fully static Rust binary for the musl target and run it from a scratch image. Covers the target, linker, OpenSSL and DNS caveats, the allocator and how to verify.
3 min read
DevOps
Distroless Alpine Scratch and Debian Slim for Rust Images
Four runtime base images for Rust containers, compared on size, libc, debugging, TLS certificates and security. A decision table and the failure each choice invites.
3 min read
DevOps
A Small Docker Image for Rust With Multi Stage Builds
Build a Rust service image in two stages so the final image holds only the binary and what it needs to run. See the Dockerfile, the sizes to expect and the checks that it works.
3 min read