Size of cruft aside, there&#x27;s value in discussing whether such cruft should exist.<p>It&#x27;s normal for common tools to be SUID root - it&#x27;s necessary for operation on a normal machine. Do you really need 30+ SUID binaries inside your Docker container built for one thing?<p>Docker seems to present an ideal situation for stripping such potential exploit vectors back.