{"repo":"reSecureIt/BLAFS","free":true,"listed":false,"github":"https://github.com/reSecureIt/BLAFS","clone":"git clone https://github.com/reSecureIt/BLAFS.git","description":"A tool for Container Debloating that removes bloat and improves performance and security","language":"Go","stars":640,"topics":["container","docker"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"BLAFS Shrink you container size up to 95%. Introduction BLAFS is a bloat-aware filesystem for container debloating. The design principles of BLAFS are effective, efficient, and easy to use. It detects the files used by the container, and then debloats the container by removing the unused files. The debloated containers are still functional and can run the same workload as the original containers, but with a much smaller size and faster deployment. Check the paper for more details: The Cure is in the Cause: A Filesystem for Container Debloating. Installation The easiest way to install BAFFS is to use the Docker image: Quick Start 1. Pull the BLAFS image: 2. Run the BLAFS container with privileged mode, so that we can run Docker in Docker: Note that we mount the host's /tmp/docker to the container's /var/lib/docker . In this way, all the images pulled inside the container baffs will be stored in the host's /tmp/docker . You can change the path to any other directory you like. 3. Enter shell of the container: 4. Inside the container, we pull a redis image. We will debloat this image later. 5. Now we can start to debloat the redis image. This will convert the filesystem of the redis image to BAFFS filesystem. 6. Now we run the redis container with profiling workloads. It's recommended to run some extensive workloads, such as the unit tests/integration tests of your container. Here, for brevity, we simply start the redis server: After the redis server is started, use Ctrl+C to sto","default_branch":null,"files":null,"tree":[],"storefront":"/r/reSecureIt","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/reSecureIt/BLAFS/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}