dotnet-docker

dotnet-docker copied to clipboard

Attach SBOMs to images in the container registry

3

- https://learn.microsoft.com/en-us/azure/security/container-secure-supply-chain/articles/attach-sbom - https://oras.land/blog/oras-0.14-and-future/#attach-the-sbom-to-this-image We can use the ORAS tool to directly attach SBOMs to our images in our container registry. This makes the content of our images more discoverable...

lbussell

Automatic dependency update PRs should include version information

3

We should consider adding the SDK build number to automatic dependency update PRs in this repo. This would provide a few benefits: - easier to evaluate the correctness of dependency...

lbussell

Public pipeline run example: [link](https://dev.azure.com/dnceng-public/public/_build/results?buildId=681540&view=ms.vss-test-web.build-test-results-tab&runId=16913508&resultId=100019&paneView=debug)  Notice how the title still refers to "3.1 - focal". We have not shipped that image in a very long time. And the tests...

lbussell

Related to https://github.com/dotnet/dotnet-docker/issues/5331 When Azure Linux 3.0 is released, these images should be added to the main branch. The Azure Linux Feature Roadmap is here: https://github.com/orgs/microsoft/projects/970/views/2 (Sprint assignment is tentative...

lbussell

Create an HTTP/3 / QUIC sample

1

[HTTP/3](https://learn.microsoft.com/en-us/dotnet/core/extensions/httpclient-http3) is fully supported in .NET 7+, but we have no formal samples showing how to enable that scenario. We get issues or questions from time to time about how...

lbussell

Remove `core` syndication

4

Do we still need this support? https://github.com/dotnet/dotnet-docker/blob/f4786b8c0b4469f7eb18f891fd6c090561e50006/manifest.samples.json#L18-L31 https://github.com/dotnet/dotnet-docker/blob/f4786b8c0b4469f7eb18f891fd6c090561e50006/manifest.json#L7-L12

richlander

Not all sample images are built and tested in CI/PR validation

1

https://github.com/dotnet/dotnet-docker/pull/4534 restructured some of the sample dockerfiles, but left some of them, like [Dockerfile.debian](https://github.com/richlander/dotnet-docker/blob/654dbd52d157901292a22f20bf34006ff0a27bb6/samples/aspnetapp/Dockerfile.debian) unable to build and/or run. The [dotnet-docker-samples](https://dev.azure.com/dnceng/internal/_build?definitionId=376) pipeline only ends up building images that we publish...

lbussell

Unable to capture dumps from containers based on sample images

11

### Describe the Bug Using diagnostic tooling to capture dumps from containers that are running the sample images fail with error message "Problem launching createdump (may not have execute permissions):...

jander-msft

Docker's `--publish-all` option doesn't work when running a .NET container

2

The `docker run` command has a `-P, --publish-all` option which publishes all the exposed ports of the image to random ports on the host. But since the .NET Dockerfiles don't...

mthalman

Update HTTPS sample to include keyvault

1

Based on customer request. https://github.com/dotnet/dotnet-docker/blob/main/samples/host-aspnetcore-https.md

richlander