TLDR Tech / Data
ClickHouse on Docker Hardened Images
ClickHouse now ships hardened Docker images built on a minimal base with no shell, package manager, or network tools, dropping from 8 medium-severity CVEs in the standard Ubuntu image to zero while keeping database behavior identical. Migration is a one-line change to the docker run command, and a debug variant exists that temporarily attaches tooling without modifying the production image.
Read the full story