Why Hardened Images are Suddenly Everywhere
15d 14h ago by programming.dev/u/codeinabox in security@programming.dev from redmonk.com
Disclaimer: Docker, Red Hat, Bitnami by VMware/Broadcom, Google, AWS, and Chainguard are all RedMonk clients.
Real good of them to throw that in at the very end of a lengthy article promoting their products.
If NixOS could strip down its base, it could very well serve a base for other hardened images.