In this video CJ explains basic secure code isolation concepts and shows tools you can use to limit the blast radius of infected codebases.

00:00 - Intro
02:03 - The Blast Radius
02:59 - Security Concept 1: Principle of Least Privilege
03:27 - Security Concept 2: Egress Filtering
04:06 - Security Concept 3: Ephemeral Environments
04:21 - Securty Concept 4: Defense in Depth
04:52 - Containerization
05:51 - Dev Containers
06:32 - Virtual Machines
07:11 - GUI VM Apps
07:57 - Docker sandbox
08:28 - Lima / Colima
08:46 - Full Seperation - VPS / Cloud Environments
09:42 - Github Codespaces / coder.com
10:08 - Paranoid
10:20 - Seperate Development Laptop
10:46 - Live OS
11:24 - Air Gapped Development
11:54 - Recap

debian-slim

If you’re looking for a general-purpose base image with a reasonable size that’s not based on musl, then you might consider using UBI (Universal Base Image) made by Red Hat, which has only 26.7MB in its "micro" version ( registry.access.redhat.com/ubi8-micro), which is also fairly close to Alpine.

Getting Started with Kubernetes sounds like quite a daunting feat. How do you get started with “an open-source system for automating deployment, scaling, and management of containerized applications”?