search

oracle / container-images

Oracle Linux container images
Other
183 stars 64 forks source link

stable tags of slim variants not available #49

Closed fredcooke closed 2 years ago

fredcooke commented 2 years ago

7-slim etc are constantly rewritten - there are no 7.7-slim versions with venerable ages like there are for the plain 7.7 etc variants that go right back and are untouched - this means we cannot get a stable build without producing in house 7-slim-DATE tags many of which will be identical to each other since we can't know when a new one comes except through manual inspection.

Similarly the Dockerfile has no history, just a single commit 8 days ago in line with the timing of the tags themselves. I speculate that you're committing binaries to the repo and want to keep it slim-ish by force pushing on the regular or something? Not a pleasant architecture to consume or work with overall.

tvierling commented 2 years ago

They will not be made available, and in fact as of the release of OL9, we have stopped shipping "patchlevel" based images at all.

The family of OS's containing Oracle Linux (this also includes Rocky and Alma) only has a single version number. The Oracle Linux version number consists of only one number (6, 7, 8, 9) and any dotted number after that is only an update or patch level; if you were using "7.7" that means you were guaranteed to be out of date and vulnerable to security bugs.

You should not use any OL container image with a dot in the version. It was, frankly, an error to release them at all, as we found by so many users incorrectly employing them and discovering that they were hit by long-since-fixed security vulnerabilities. For that reason, we stopped providing "patchlevel" tags, and there will never be "X.Y-slim" tags.

tvierling commented 2 years ago

On that note: If you want a stable base tag, you are free to pull a tag and retag it in-house for reproducibility purposes. There's nothing stopping you from doing, for instance,

docker|podman pull ghcr.io/oracle/oraclelinux:7-slim docker|podman tag ghcr.io/oracle/oraclelinux:7-slim my-oraclelinux:7-slim-$(date +%Y%m%d)

whenever you want to get a new "stable base image". This is a recommended way to do exactly this sort of thing with any external Docker image you use.