Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request for tagged Images #47

Open
erkules opened this issue Apr 3, 2022 · 1 comment
Open

Request for tagged Images #47

erkules opened this issue Apr 3, 2022 · 1 comment

Comments

@erkules
Copy link

erkules commented Apr 3, 2022

Not sure if this is the right place.
Right now there is always a :latest image on docker hub.
Would be great to have a tagged version and not only the latest.
So having a history of tags. would simplify deploying openunison.

thx

@mlbiam
Copy link
Contributor

mlbiam commented Apr 3, 2022

Thanks @erkules for reaching out. If you want specifically tagged images, we recommend that you import our images into a local registry instead of pulling directly from Dockerhub.

The reason we only publish a latest image is to make it easier to maintain our patching process (https://www.tremolosecurity.com/post/our-commitment-to-patching). All of our published containers are updated whenever Ubuntu publishes a fix for a CVE. This usually happens twice a month and you can track when this happens by looking at the patchlog.txt in our repositories. Since we release fairly often (I think we've had 3 releases in 2022 to address customer needs) having an open source "LTE" would be difficult and we've found over the years that its exceedingly rare we introduce a breaking change without catching it in our automated testing.

What we don't want to happen is to either publish an old container with known vulnerabilities or be in a situation where "unpublishing" a container leads to clusters becoming un-accessible because they can't pull an image.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants