OpenSignLabs / OpenSign

🔥 The free & Open Source DocuSign alternative
https://www.opensignlabs.com
GNU Affero General Public License v3.0
3.24k stars 246 forks source link

Feature Request: Please provide an official Docker image on the Docker Hub #795

Open adamency opened 4 months ago

adamency commented 4 months ago

Feature Title

Official Docker Image

Feature Description

Currently everywhere in your project you tell people to build the binary themselves, and thus build the docker image themselves too. It's obvious that this comes from a place of transparency/security, and that's good. However, all major projects SHOULD provide an official Docker image on the docker hub (or another trusted public registry).

1st

Without any docker images, this means every user must build the program all the time. Ecologically, this is a huge waste of resources when there's only need for one person building the image, then making it available online (like for all major open source projects and distribution packages).

2nd

This makes everyone not wanting to build themselves lose time for nothing (if someone doesn't trust your official docker image, I would gladly like to get their answer on if they did vet your whole source code).

3rd

and the most important: Not doing so, you're allowing a lot of unverified images from unknown publishers that many people will pull mistakenly without knowledge of how the full end-to-end software delivery lifecycle. This directly thwarts the original security aspect aforementioned.

4th

This forces every user of the project to needlessly install nodejs and npm on their machine.

Like every professional project, you should provide a docker image and in the documentation tell about both option, the official image and its url, and how to build the project for those that want to do so.

PS: And as a fifth point, this will surely widely increase the visibility of your great project :).

What type of feature are you requesting?

Security / Compliance

Importance

Critical

Additional Context

No response

Code of Conduct

Zathiel commented 4 months ago

Hello @adamency

Thanks for the report.

I can confirm we have that on our backlog and i will keep you in touch concerning an ETA as soon as possible.

Regards

adamency commented 4 months ago

@Zathiel Thanks a lot for your quick answer 🙏

compgeniuses commented 4 months ago

wonderful

dgilsonAfelio commented 3 months ago

Is it not the official one ? https://hub.docker.com/u/amolshejole I can see these are the used image for DigitalOcean deployment

nxglabs commented 3 months ago

Is it not the official one ? https://hub.docker.com/u/amolshejole

I can see these are the used image for DigitalOcean deployment

That image has specifically been tested to work on Digital Ocean.