Which Docker best practice reduces the attack surface of a container image?
-
A
Using a full OS base image like ubuntu:latest
-
B
Using minimal base images such as Alpine or distroless
-
C
Running the container as the root user
-
D
Installing all development tools in the production image