Continued hardening of Retool's infrastructure
Retool previously announced the adoption of hardened deployment images, starting with the backend service. A hardened code-executor image is now available, built in the same manner as the backend image.
These images are used by Retool for its cloud-hosted platform and are available for self-hosted organizations to adopt. Eventually, all images used by Retool will be hardened.
Hardened images are built on a minimal, tightly controlled base to improve supply-chain security and reduce the attack surface. They also benefit from a smaller, more tightly curated set of included software, which reduces the risk of security vulnerabilities.
Retool is continuing to work on new and existing hardened images. Over time, this means some existing features and bundled libraries will no longer be supported in their current form. If a feature or library will no longer be available, or if a change requires updates to your current configuration, Retool will share this information in a changelog post with specific information and any relevant migration guidance.
Each changelog post will provide as much advance notice as possible so that you have time to review and implement any changes that may be needed.