You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The phusion/baseimage:focal-1.2.0 Docker image on Docker Hub was pushed a year ago and has not been updated since. There are new jammy-* images, but so far we do not support Ubuntu Jammy. Although we do apt-get upgrade when building and running our own images, these commands bloat the image. Ideally the base image should be updated regularly when there are updates to its own base image or packages, even if there are no code changes in itself (also see Rebuild Docker images with the latest security updates from time to time #2667).
The phusion base image comes preinstalled with some utilities and services that we don't really need, which bloat the image and potentially introduce vulnerabilities. We can do apt-get remove when building our own images, but this will not reduce our image size.
Nevertheless, we don't want to simply change our base image to ubuntu:20.04, because the phusion base image does have a lot of good stuff.
Potential solutions:
Ask the maintainers of phusion/baseimage to regularly update the images on Docker Hub.
Description
As of writing, we use phusion/baseimage:focal-1.2.0 (code) as the base image of our Docker image.
Issues:
phusion/baseimage:focal-1.2.0
Docker image on Docker Hub was pushed a year ago and has not been updated since. There are newjammy-*
images, but so far we do not support Ubuntu Jammy. Although we doapt-get upgrade
when building and running our own images, these commands bloat the image. Ideally the base image should be updated regularly when there are updates to its own base image or packages, even if there are no code changes in itself (also see Rebuild Docker images with the latest security updates from time to time #2667).phusion
base image comes preinstalled with some utilities and services that we don't really need, which bloat the image and potentially introduce vulnerabilities. We can doapt-get remove
when building our own images, but this will not reduce our image size.Nevertheless, we don't want to simply change our base image to
ubuntu:20.04
, because thephusion
base image does have a lot of good stuff.Potential solutions:
phusion/baseimage
to regularly update the images on Docker Hub.phusion/baseimage
and maintain our own base image (both code and image). For example, take a look at phusion/baseimage-docker@master...HydroMoon:laravel-baseimage:master, https://github.com/cyledge/baseimage-docker and https://github.com/phusion/baseimage-docker/network.phusion/baseimage
into our repository directly (and maintain it), so that we can change our base image toubuntu:20.04
.Impacts
Describe which portion(s) of BitShares Core may be impacted by this bug. Please tick at least one box.
CORE TEAM TASK LIST
The text was updated successfully, but these errors were encountered: