# Docker Hardened Images

11 Hacker News commenters recommended Docker Hardened Images and 14 criticized it, November 2025 to November 2026. It was recommended in 4 of 13 months.

**Verdict:** Free, security-focused container base images built from minimal packages, with Socket Firewall protection during builds; critics expect the free tier won't last.

## Why people recommend it

- Free to use now (3 comments): "hardened images is largely free now" ([source](https://news.ycombinator.com/item?id=47123651)) "This makes that checkbox free." ([source](https://news.ycombinator.com/item?id=46308576)) "No reason not to use them." ([source](https://news.ycombinator.com/item?id=46302909))
- Eases compliance and remediation (2 comments): "making it easy to show quick remediation schedule can make deals easier to close" ([source](https://news.ycombinator.com/item?id=46315984)) "This makes that checkbox free." ([source](https://news.ycombinator.com/item?id=46308576))
- Built-in build-time security protection (2 comments): "Docker Hardened Images integrate Socket Firewall, which provides protection from threats like Shai-Hulud during build steps." ([source](https://news.ycombinator.com/item?id=46305645)) "secure-by-default should be the starting point for every developer, not something you bolt on later" ([source](https://news.ycombinator.com/item?id=46305233))

## What people warn about

- Free tier may not last (5 comments): "Feels like they're trying to put the cat back in the bag and recoup a fraction of the exodus from the registry thing." ([source](https://news.ycombinator.com/item?id=46304500)) "Given Docker's track record it won't be free indefinitely, this is a move to gauge demand and generate leads." ([source](https://news.ycombinator.com/item?id=46309560)) "It's free for now, just like registries were "free" and docker desktop was free.. until they weren't." ([source](https://news.ycombinator.com/item?id=46305222))
- Login gating and broken access (3 comments): "They're login gated, which is at best unnecessary friction." ([source](https://news.ycombinator.com/item?id=46304087)) "links to this 404-ing GitHub URL" ([source](https://news.ycombinator.com/item?id=46302826)) "my docker.com creds don't work" ([source](https://news.ycombinator.com/item?id=46311627))
- Seen as marketing against rivals (3 comments): "Given Docker's track record it won't be free indefinitely, this is a move to gauge demand and generate leads." ([source](https://news.ycombinator.com/item?id=46309560)) "this was largely a marketing maneuver by Docker aimed at disrupting Chainguard's momentum" ([source](https://news.ycombinator.com/item?id=46313853)) "Docker is just grasping at straws." ([source](https://news.ycombinator.com/item?id=46313942))
- Distroless builds show smaller attack surface (2 comments): "The build from source on distroless approach provides a meaningful advantage re attack surface and CVEs versus DHI images." ([source](https://news.ycombinator.com/item?id=48659434)) "this makes a significant difference in attack surface and CVE count re DHI images" ([source](https://news.ycombinator.com/item?id=48658866))

## Alternatives hackers recommend

- [StageX](https://hackerapproved.com/p/stagex.md): 12 recommend
- [Chainguard Images](https://hackerapproved.com/p/chainguard.md): 9 recommend
- [Minimus container images](https://hackerapproved.com/p/minimus-container-images.md): 6 recommend
- [Distroless container images](https://hackerapproved.com/p/distroless-container-images.md): 5 recommend

## Cite as

Hacker Approved, "Docker Hardened Images", https://hackerapproved.com/p/docker-hardened-images/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).