cedws / docker-ghidraserver Goto Github PK

I'd like to use distroless Java as a base image to reduce the image size (which is currently a whopping 1.8GiB) and improve security. Ghidra instances could be a valuable target for attackers so it's important that the image is secure and doesn't contain bloat where vulnerabilities can accumulate.

The problem with using distroless is that it's extremely barebones and doesn't even contain a shell interpreter. Ghidra ships utility shell scripts for managing users and privileges which wouldn't be executable with distroless.

I'm thinking of building a sidecar image which can manage the users file separately, maybe through a small Go utility. It might even be nice to build a web frontend for it but I'll see if I have the time. I could do config generation from envvars in this sidecar too.