Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update base image to CentOS 7 #1

Closed
poikilotherm opened this issue Feb 27, 2019 · 3 comments
Closed

Update base image to CentOS 7 #1

poikilotherm opened this issue Feb 27, 2019 · 3 comments

Comments

@poikilotherm
Copy link
Member

Currently, the base image in use is centos:7.5 instead of centos:7.

This is due to possible problems lurking beyond an update described in IQSS/dataverse#5374.
It might be totally unrelated and just caused by the preparation scripts, but better safe than sorry.

This issue tracks the progress and is used for a switch test. Let's see how this goes.

@pdurbin
Copy link
Member

pdurbin commented Feb 27, 2019

This is probably a good idea. I was just reading this article called "Top ten most popular docker images each contain at least 30 vulnerabilities":

https://snyk.io/blog/top-ten-most-popular-docker-images-each-contain-at-least-30-vulnerabilities/

I guess I'm wondering how often the dataverse-k8s image will need to be rebuilt. I assume the base image is being patched frequently by the operating system vendor (Red Hat, in this case).

@poikilotherm
Copy link
Member Author

Yes it is :-)

I am thinking about switching from Docker Hub Automated Builds to a proper Travis CI job, as Travis offers scheduled rebuilds. A rebuild of all Docker tags every day or every two days could be a good idea... ;-)

Obviously it would be better to even take this further and let a test-suite run to ensure nothing breaks from a OS/base image change.

@poikilotherm
Copy link
Member Author

After testing the image based on centos:7 nothing blew up - just Exceptions unrelated to the base image.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants