docker-maven icon indicating copy to clipboard operation
docker-maven copied to clipboard

Please add version specific alpine build like -alpine3.15

Open aeimer opened this issue 3 years ago • 6 comments

We are using your images and were pretty happy in the past. As we use kaniko the update to alpine 3.15 on the -alpine tags broke our CI. => rootfs problem

It would be great to have a -alpine and -alpine3.14 and -alpine3.15 tag version in future.

aeimer avatar Jan 19 '22 13:01 aeimer

which tag were you using?

carlossg avatar Jan 20 '22 14:01 carlossg

@carlossg I was using maven:3.8-eclipse-temurin-11-alpine.

aeimer avatar Jan 20 '22 15:01 aeimer

the upstream image doesn't have different tags for alpine versions, so I can't depend on specific alpine versions

https://hub.docker.com/_/eclipse-temurin?tab=tags&page=1&name=alpine

I suggest using shas instead of tags for public images as they are continuously rebuilt

carlossg avatar Jan 20 '22 15:01 carlossg

@carlossg I acutally commented this https://github.com/adoptium/containers/issues/135#issuecomment-1016467456 So I hope they will add that feature too!

We use your maven temurin for building and temurin directly for running. Both things broke.

I actually want to have the newer versions due to security updates. Hashes are pinning the image yes, but that does not fit our security standards.

aeimer avatar Jan 21 '22 10:01 aeimer

what is the problem with 3.15 ? I had issues with 3.14 and older runc https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.14.0#faccessat2

carlossg avatar Jan 21 '22 13:01 carlossg

@carlossg this was our pipeline. From one day to another it didn't work...

grafik

aeimer avatar Jan 28 '22 12:01 aeimer