Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using alpine instead of centos as a base image #148

Open
simonseyock opened this issue Oct 18, 2023 · 5 comments
Open

Using alpine instead of centos as a base image #148

simonseyock opened this issue Oct 18, 2023 · 5 comments

Comments

@simonseyock
Copy link

We ran a vulnerabilites scan on the image and detected quite some problems of which many are related to the centos base image.

I tried replacing the base image for alpine and used it in our project, it worked without any problems and reduced the size of the image by 90%.

image

I would suggest switching the base image if there are no bigger concerns about it.

@simonseyock
Copy link
Author

I found this PR, that also used a multistage build which seems not to be necessary: #120

The only difference there in the image is the addition of the ca-certificates package. This is probably needed for https support which I did not test.

@simonseyock
Copy link
Author

Is this something which is doable? Either replacing the base image or adding a second alpine image?

I can work on developing the existing PR by @jingsam.

I like the multistage build idea thats included in the PR, I think that is a good approach to make the image building consistent between different build systems.

@simonseyock
Copy link
Author

@dr-jts or @pramsey, I don't want to bother, but do you have any opinions about this?

@pramsey
Copy link
Collaborator

pramsey commented Jan 17, 2024

We have a PR ongoing that will result in a much smaller base image, though still not an alpine base, see #154

@simonseyock
Copy link
Author

That looks quite promising, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants