Canonical containers
Canonical containers, also known as “rocks”, are a new generation of secure, stable and OCI-compliant Ubuntu images, hardened by design, and offering a specialized and predictable UX.
Use a rock
Rocks are hardened to chisel away contents that are unnecessary at runtime, thus preserving the same functionality while reducing the storage footprint and attack surface. Like this Python rock.
Building steps
Get started with rocks
Try building a 'Hello world' rock. You can also build rocks for a variety of applications.


