The Container Drumbeat: Rust and .NET Images are Now Available.
Jonny Rivera
July 29, 2025
.webp)
Frequently Asked Questions
Why did ActiveState add Rust and .NET Runtime container images to its library?
Rust has grown rapidly as a language of choice for building performance-critical and security-sensitive systems, particularly in infrastructure and systems programming where memory safety matters. .NET Runtime remains the foundation for a significant portion of enterprise application development, particularly in organizations with large C# codebases. Adding secure, low-to-no CVE container images for both ecosystems extends the same built-from-source, continuously remediated approach to development teams who had previously been pulling from public registries with no security guarantees.
What does 'low-to-no CVE' mean for these container images and how is that maintained over time?
Low-to-no CVE means the images are built from verified source components selected for their minimal vulnerability footprint, with no unnecessary packages or utilities included. The posture is maintained over time through nightly rebuilds: every image is automatically rebuilt each night, incorporating the latest patched versions of any components where a fix is available. Critical vulnerabilities in any included component are remediated within seven days. This means teams pulling the latest tag consistently receive an image that reflects the current state of available patches rather than a static snapshot from whenever the image was first published.
What is planned for the ActiveState secure container library beyond Rust and .NET?
The Rust and .NET Runtime additions are part of an ongoing expansion of ActiveState's free container library. Coming next are developer variants of existing images — containers that include build toolchains in addition to minimal runtimes, designed for use in development and CI environments rather than production deployment only. Beyond language runtime images, ActiveState plans to add container images for popular applications including Postgres and Nginx. Teams with specific container requirements not yet covered can request customization through the ActiveState customer success team.
.png)
.png)
.png)