Docker has recently made an announcement regarding the availability of free access to a collection of secure container images known as DHI (Docker Hardened Images). These images, which can be found on Docker’s official site, include over a thousand minimalist builds based on Alpine and Debian. They also come with pre-configured environments suitable for running various applications, tools, runtimes, and platforms. The images are licensed under Apache 2.0 and are fully supported by Docker.
By utilizing these DHI images, users can simplify the task of maintaining infrastructure security. Docker takes on the responsibility of addressing vulnerabilities in the base content of the images and promptly releasing updates. This allows users to focus on securing their applications and any additional dependencies they install. To safeguard against Supply Chain attacks that target dependencies, the image contents are sourced from code using controlled namespaces, peer review processes, and a “cooling off” period before new versions are distributed.