search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.69k stars 578 forks source link

Any plans on generating a Windows Docker Image? #3472

Open mariotepro opened 8 months ago

mariotepro commented 8 months ago

Current Behavior

Currently, Docker Hub has only Linux images.

Proposed Behavior

Since installation via WAR is deprecated, won't be supported on later versions. Currently we could deploy DTrack on any system with a JVM.

When trying to install via Docker, We found out We currently just have available linux Docker images. Therefore, We have lost any support for Windows or Mac.

We've tried the installation over a Windows Server machine but drawbacks are taking us back out of this method of installation (since we have to install over WSL, and not in a native way). We are worried about the future, when WAR installation method won't be supported.

I know I could develop my own Docker image, but I couldn't not resist to point out we are losing official support for those platforms and consequently, losing functionality one day we had.

Are there any plans on generating an official Windows Docker image?

Checklist

nscuro commented 8 months ago

No plans to offer a Windows container image yet.

It's not that we are strictly against it, it's more that we didn't see the need so far (to be honest you're the first to ever ask about it). This also means we haven't done any research into how well it would work with GitHub Actions, how much our existing Dockerfiles need to be modified for it to work, etc.

Chances of getting this into the project would be highest if the community would propose a PR with the required changes.

On the JAR distribution being deprecated, that has mainly to do with us not having the capacity to support people in how to setup their JVM, file permissions, etc.

However, at least for the lifetime of DT v4.x, we'll continue to publish the JAR, and you'll continue to be able to download and use it.

mariotepro commented 8 months ago

Ok, then.

So there is no rush, since it'll be supported, at least for DT v.4.x. I'll try then to develop a Dockerfile for Windows, I'm not much into Docker image creation, but let's try.

I'll be glad if someone gives me a piece of advice or some info for where to start at. :)