For anyone into OPSEC that want to do away with Kali Linux and other pentesting distros, you may wanna look into this: https://github.com/ThePorgs/Exegol?tab=readme-ov-file
Exegol is hacking environment that is pretty much a Docker image that has most tools you'd find Kali and others.
It may be better to split your environment into containers for deployment but ymmv.