Re:Distroless: Language focused docker images, minus the ope...
by mattomata on Saturday October 07, 2017 @01:17PM
(#15424638)
When I have reached out to ncopa to report issues in their feed he responded:
> the secdb has so far been an experiment, but seems like people are actually using it, so I should set up some proper automated testing.
I doubt there is a better source :)
Re:Distroless: Language focused docker images, minus the ope...
by earlybike on Saturday October 07, 2017 @01:37PM
(#15424734)
Thanks, do you have any link?
Re:Distroless: Language focused docker images, minus the ope...
by mattomata on Saturday October 07, 2017 @03:31PM
(#15425282)
Nope, it was over email.
I can point you at the various fixes for things I've reported since this first became available, but given your skepticism I'm sure it would not help since he seems to exclusively use the changeset description: "[add] various fixes" with no attribution.
Here's the link for that last bit: https://git.alpinelinux.org/cgit/alpine-secdb/log/
¯\_(ツ)_/¯
I did never experienced any.
> It has a package, but it is far from comprehensive
Still better than the missing package manager of a distroless container (this was the comparison). However, I think it‘s quite good.
> The security database is still essentially an experiment with much less richness than Ubuntu, Debian, Redhat, ...
Do you have some sources proving it‘s an experiment?