Tinkering with talos linux. Im very open to the idea of immutable linux for your containers. Attack surface -> 0.

Tip: if you dont know the list of parameters try: talosctl whateveryouarelookingat -o yaml output