{
  "$type": "site.standard.document",
  "description": "Use gcr.io/distroless and self-built Envoys to have more control and to reduce dependencies, vulnerabilites, and image size.",
  "path": "/decisions/containers/",
  "publishedAt": "2025-12-03T00:00:00Z",
  "site": "at://did:plc:bnr33h7nafe5nk4zzlshvana/site.standard.publication/3mnb3xdhll227",
  "tags": [
    "Docker",
    "Distribution"
  ],
  "textContent": "This replaces Use Distroless Envoy images with a new decision to build IO container images directly using Google's distroless images and Envoy binaries that we build ourselves. Pros IO can use the latest features in Envoy, including prerelease versions. We can use a Debian 13 image , which is reportedly faster and has observably fewer security vulnerabilities. Cons We have to build our own Envoys, and Envoy builds are slow . ",
  "title": "Build Envoy and IO containers directly"
}