“tini”

Signal-Safe Entrypoints with tini and dumb-init

Why PID 1 in a container ignores SIGTERM and leaks zombies, and how to fix it with docker run --init, tini, or dumb-init, with worked examples.