The concept of hardened images has been picking up lately. The logic behind them is to address the issues arising from running container images. https://www.i-programmer.info/news/240-devops/18526-bellsoft-introduces-hardened-container-images.html
A dairy of my work.Just links to the full artices on i-programmer.info