TLDR InfoSec · STRATEGIES & TACTICS
HOW BOTTLEROCKET OPTIMIZES EKS WORKLOADS
Summary from the TLDR InfoSec newsletter
A comparison of the available EKS optimized base OSes for security and scalability. Amazon Linux 2023 provides consistent improvements over Amazon Linux 2, but Bottlerocket, which was designed specifically for container orchestration, trumps both. Bottlerocket provides strong security defaults while providing a minimal host OS as it strips out traditional tools like shells and interpreters that are not necessary for container orchestration.