search

fabric8io-images / README

Overview of Docker images provided by fabric8
17 stars 3 forks source link

Images should be rebulid / re-release periodically #7

Open m4rc77 opened 3 years ago

m4rc77 commented 3 years ago

The fabric8/java-centos-openjdk8-jre:latest is 5 Months old (today 18th of March 2021), the fabric8/java-alpine-openjdk8-jdk:latest image is one year old (today 18th of March 2021). In order to have the latest security updates from centos/alpine/... installed the images should be re-built periodically and new versions should be tagged in order to have stable "releases".

As a Workaround all images inheriting from fabric8/java-centos-openjdk8... base-images should perform a 

# ensure that all base-image-dependencies are brought to the newest versions
RUN yum update -y

as a first step in the Dockerfile.

manusa commented 3 years ago

Hi @m4rc77,

Where are you using these images?

If I'm not mistaken, the main purpose of the fabric8io-images was to provide base images for Fabric8 Maven Plugin (FMP) which has now been deprecated in favor of Eclipse JKube.

Are you still using FMP? are you using the base images for something else? Is it feasable for you to switch to the new JKube base images?

m4rc77 commented 3 years ago

Hi @manusa

Thanks for you hint.

The fabric8/java-centos-openjdk8-jre images were/are popular to run Java 8 fat-jar Java applications (e.g. SpringBoot based applications). I guess there are still a lot of them out in the wild running on container platforms.

In our case we either use the mentioned workaround with the yum update -y or switch to the UBI Java8 Image from RedHat (Image: registry.access.redhat.com/ubi8/openjdk-8:latest, Details see https://catalog.redhat.com/software/containers/ubi8/openjdk-8/5dd6a48dbed8bd164a09589a)