Exploiting Alpine Linux

Re:Exploiting Alpine Linux by subway on Monday July 17, 2017 @12:52PM (#14790274)

Your best bet is really to build your base image using debootstrap or similar. The 'official' images are often a joke. For the longest time, the maintainer of the 'official' Ubuntu image had no clear association with either Docker Inc or Canonical.

edit: To clarify, the images themselves are quality, and do get generated from Canonical's rootfs tarball, but the trust path for a huge chunk of binary data now hinges on a single individual, rather than a corporate entity.

[ Parent | on HN ]

Re:Exploiting Alpine Linux by tfvghbv on Monday July 17, 2017 @01:30PM (#14790632)

> the trust path for a huge chunk of binary data now hinges on a single individual, rather than a corporate entity.

You make it sound like it was a bad thing. It's not.

[ Parent | on HN ]

Re:Exploiting Alpine Linux by atonse on Monday July 17, 2017 @01:55PM (#14790834)

It is definitely a bad thing from a risk standpoint, no two ways about it. Simply because that person could get hit by a bus, burn out, etc.

[ Parent | on HN ]

Re:Exploiting Alpine Linux by k_sh on Monday July 17, 2017 @01:50PM (#14790804)

I'd trust Canonical for Ubuntu images over a random internet citizen that decided to provide them.

[ Parent | on HN ]

Re:Exploiting Alpine Linux by s_kilk on Monday July 17, 2017 @02:08PM (#14790947)

When it comes to base images, I'd much rather trust Canonical, Docker Inc, Redhat, etc than Some Dude.

[ Parent | on HN ]