Christian Lehnert — Linux, Hacking & Faith
popular tags: #linux #psychology #faith #selfhosted #homelab #tip-of-the-week
// tip of the week 2026-08-27
Minimus - Near-Zero-CVE Base Images You Can Just Use

Most of a container's CVEs live in base-image software your app never touches: the shell, the package manager, a hundred unused libraries. Minimus ships hardened distroless bases built from source with near-zero CVEs, drops in with a one-line change, and is free since June 2026. The catch is the usual distroless one: no shell, so you debug from the outside.

read tip → all tips
2026-09-03 NetBird - A Self-Hosted Mesh Where Your Machines Just Find Each Other
2026-09-01 kube-bench - Score Your Cluster Against the CIS Benchmark in One Job
2026-08-29 run0 vs sudo - Escalating Privilege Without a setuid Binary
2026-08-27 TIP Minimus - Near-Zero-CVE Base Images You Can Just Use
2026-08-25 Phishing-Resistant Auth - Why Your MFA Does Not Stop Phishing, and What Does
2026-08-20 How Software Development Changes From Here - Reading the Bitkom 2036 Study as a Practitioner
2026-08-18 Claude's Invisible Watermark - What It Actually Proves
2026-08-15 systemd Service Hardening - The Sandbox You Already Have and Do Not Use
2026-08-13 Init Containers - Run Something First, Then Get Out of the Way
2026-08-11 The Sidecar Pattern - Bolting Capabilities Onto a Pod Without Touching the App
1/13 older >