@mre@mastodon.social In regards to docker images I find the distroless approach still a bit bloated for my taste and often go for the absolute minimum with a scratch container. The problem with glibc can mostly be avoided by compiling for musl but then often the compilation takes super long in my experience. My favorite alternative is to compile with +crt-static on the gnu target so it compiles the glibc runtime directly into the binary and no issues with missing or wrong glibc anymore. And if you need tz databases or ca certs you can just copy them over from the rust image used to build the application, which is still smaller than the distroless images.