chainguard-images / images

Public Chainguard Images
https://chainguard.dev/chainguard-images
Apache License 2.0
543 stars 140 forks source link

`cgr.dev/chainguard/nginx` 1.25.2? #1532

Open mathieu-benoit opened 11 months ago

mathieu-benoit commented 11 months ago

Which image/versions are related to this issue/feature request?

cgr.dev/chainguard/nginx

Issue/Feature description

I'm wondering how to get the latest version 1.25.2 of cgr.dev/chainguard/nginx?

In there https://edu.chainguard.dev/chainguard/chainguard-images/reference/nginx/, it's mentioned:

This digest corresponds to nginx version 1.24.0. This image is not updated and you should migrate to the new configuration as soon as possible.

I understand that 1.24 is the stable one according to https://nginx.org/en/download.html, but curious to know if you are going to support a mainline version?

mathieu-benoit commented 11 months ago

Actually, when I run this syft cgr.dev/chainguard/nginx, I can see that it's already using the 1.25.2 version, right?

[31 packages]
NAME                           VERSION      TYPE
ca-certificates-bundle         20230506-r0  apk
glibc                          2.38-r4      apk
glibc-locale-posix             2.38-r4      apk
ld-linux                       2.38-r4      apk
libcrypt1                      2.38-r4      apk
libcrypto3                     3.1.3-r0     apk
libgcc                         13.2.0-r3    apk
libssl3                        3.1.3-r0     apk
libstdc++                      13.2.0-r3    apk
nginx-mainline                 1.25.2-r2    apk
nginx-mainline-package-config  1.25.2-r2    apk
openssl-config                 3.1.3-r0     apk
pcre                           8.45-r0      apk
wolfi-baselayout               20230201-r6  apk
zlib                           1.3-r0       apk

So maybe the doc needs to be updated in order to fix the version and maybe clarifying mainline versus stable?