search

chainguard-images / images

Public Chainguard Images
https://chainguard.dev/chainguard-images
Apache License 2.0
546 stars 147 forks source link

lighttpd #2310

Open hans-lammda opened 8 months ago

hans-lammda commented 8 months ago

What software would you like us to add to our image catalog? (one per issue please)

https://www.lighttpd.net/

which versions of the containerized software do you need?

1.4.74

Add some justification for why this specific image and versions are important.

I have been asked by John Speed Meyers to create a pull request for a new image needed for an upcoming demo together with the bomresolver.io project at a Swedish innovation hub. The purpose of the demo is to compare images defined versus declared by an SBOM.

Currently the packages is added onto wolfi-based

FROM cgr.dev/chainguard/wolfi-base RUN apk update && apk add lighttpd

Static content has been added and deployed to Kubernetes.

https://services.lammda.se/wolfi/

gstrauss commented 7 months ago

Latest lighttpd stable release is lighttpd 1.4.75. Please use lighttpd 1.4.75.

hans-lammda commented 7 months ago

1.4.75 works fine. For the upcoming workshop I would like to demonstrate your SBOM:s from a prebuilt image.

There is no image for lighhtpd

$ docker pull cgr.dev/chainguard/lighttpd

Error: initializing source docker://cgr.dev/chainguard/lighttpd:latest: Requesting bear token: invalid status code from registry 403 (Forbidden)

NGINX works fine.

$ docker pull cgr.dev/chainguard/nginx

Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg. Trying to pull cgr.dev/chainguard/nginx:latest... Getting image source signatures Copying blob 3d44461f2e7e done
Copying config 9bf47a6ee4 done
Writing manifest to image destination Storing signatures 9bf47a6ee4a28eb1bf461191ce8d3edbd10e55dc8116a29a7b1db161b15639b7

amouat commented 7 months ago

Thanks @hans-lammda.

I've spoken to the team and they are aware of the request. Unfortunately I have to warn you that the current list of requested images is long and it's unlikely to happen soon.

That being said, if other people require this image, please like or comment so we're aware and can hopefully prioritise it.