distroless

distroless copied to clipboard

Spam by old developer

2

Hi! I've been following this project and the issues therein for quite a while now. I've been noticing a disturbing trend lately, where old developer @dlorenc constantly comments on issues...

ReillyBrogan

base - libssl1 and libssl1.1 package metadata

3

**Describe the bug** Latest distroless/base (`73deaaf6a207c1a33850257ba74e0f196bc418636cada9943a03d7abea980d6d`) adds `libssl1.1` package metadata to `/var/lib/dpkg/status.d/` File is called `libssl1.1` https://explore.ggcr.dev/layers/gcr.io/distroless/base@sha256:559bc54043fc1429f1b9c4e16f52670c7861b7c7fd4125129c29c924b293c2b2/var/lib/dpkg/status.d/ (latest as of this issue creation) `2758d0c3 -rw-r--r-- 0/0 791 2023-05-26 21:30 libssl1.1`...

sozercan

Java example references deprecated image

2

The [Java example](https://github.com/GoogleContainerTools/distroless/blob/main/examples/java/Dockerfile) uses `openjdk:11-jdk-slim-bullseye` which is [deprecated](https://hub.docker.com/_/openjdk). The problem is they list no Debian-based alternatives.

vertti

java11/java17 do not publish a manifest like java11-debian11/java17-debian11, preventing architecture specific pulls

3

Thanks for your efforts folks. I wanted to raise this for your consideration/thoughts. **Describe the bug** According to the `README.md`: > Distroless images are based on Debian 11 (bullseye). Images...

andrewcanby-finocomp

Unable To Mirror Blobs By Tag

1

**Describe the bug** While it is easy for most consumers to just pull `latest-arm64` (and not worry about content changes), it is impossible for mirrors to pull blobs by tag...

midnightconman

[Feature] No SSL variant of gcr.io/distroless/cc

7

Hi, we use distroless images in our open source project [OPA](https://github.com/open-policy-agent/opa). The project uses CGO, and our binaries are linked against glibc. While we don't use the openssl binaries in...

charlieegan3

feat: support riscv64

10

# riscv64 architecture support for static images Add support for riscv64 architecture, so riscv64 support can be added for dependant projects that are building on distroless. > riscv64 should be...

ernado

Updated docs/links needed for including debian packages

2

Building `distroless` requires Python 2: https://github.com/GoogleContainerTools/distroless/blob/24da32901fb137d5d7dcc60476cfa5112aa52cec/CONTRIBUTING.md?plain=1#L18-L21 Bazel `rules_python` users no longer have Python 2 support, seehttps://github.com/bazelbuild/rules_python/issues/886, and was not able to find the correct way to invoke Bazel to find...

kriswuollett

Dependency on Python 2 needs to be dropped by replacing `subpar`

3

**Description** Can no longer directly use `distroless` after `rules_python` dropped Python 2 support: https://github.com/bazelbuild/rules_python/issues/886. As noted in the additional context section, it seems like `build_python_zip` can be used instead of...

kriswuollett

**Describe the bug** Hello. Using a high uid/gid for files in the image requires reserving a lot of uids/gids per operating system user user when running [docker rootless](https://docs.docker.com/engine/security/rootless/) or [podman...

akostadinov