search

carlossg / docker-maven

Official Docker image with Maven
Apache License 2.0
528 stars 424 forks source link

Please add version specific alpine build like -alpine3.15 #253

Open aeimer opened 2 years ago

aeimer commented 2 years ago

We are using your images and were pretty happy in the past. As we use kaniko the update to alpine 3.15 on the -alpine tags broke our CI. => rootfs problem

It would be great to have a -alpine and -alpine3.14 and -alpine3.15 tag version in future.

carlossg commented 2 years ago

which tag were you using?

aeimer commented 2 years ago

@carlossg I was using maven:3.8-eclipse-temurin-11-alpine.

carlossg commented 2 years ago

the upstream image doesn't have different tags for alpine versions, so I can't depend on specific alpine versions

https://hub.docker.com/_/eclipse-temurin?tab=tags&page=1&name=alpine

I suggest using shas instead of tags for public images as they are continuously rebuilt

aeimer commented 2 years ago

@carlossg I acutally commented this https://github.com/adoptium/containers/issues/135#issuecomment-1016467456 So I hope they will add that feature too!

We use your maven temurin for building and temurin directly for running. Both things broke.

I actually want to have the newer versions due to security updates. Hashes are pinning the image yes, but that does not fit our security standards.

carlossg commented 2 years ago

what is the problem with 3.15 ? I had issues with 3.14 and older runc https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.14.0#faccessat2

aeimer commented 2 years ago

@carlossg this was our pipeline. From one day to another it didn't work...

grafik