Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Docker base image to avoid Debian OS #385

Closed
masesdevelopers opened this issue Mar 13, 2024 · 3 comments · Fixed by #386, #387, #388 or #389
Closed

Update Docker base image to avoid Debian OS #385

masesdevelopers opened this issue Mar 13, 2024 · 3 comments · Fixed by #386, #387, #388 or #389
Assignees
Labels
Docker Docker images related issue enhancement New feature or request

Comments

@masesdevelopers
Copy link
Contributor

          Docker scout reports some vulnerabilities should be solved:

image
Meanwhile the base image shall be changed to avoid the usage of the Debian OS. See https://mcr.microsoft.com/en-us/product/dotnet/runtime/tags and check the right variant to use; or surf https://github.com/dotnet/dotnet-docker/blob/main/documentation/ubuntu-chiseled.md for other info.

Originally posted by @masesdevelopers in #329 (comment)

@masesdevelopers
Copy link
Contributor Author

Extract Docker publish and adds a workflow which runs on:

  • after the release workflow
  • after a manual trigger

@masesdevelopers
Copy link
Contributor Author

Add disclaimer on licenses used from Docker base runtime image referring to https://github.com/microsoft/containerregistry/blob/39d2e014897475ef6cdb08e29c08645f53f0dc93/legal/Container-Images-Legal-Notice.md and https://github.com/microsoft/containerregistry/blob/39d2e014897475ef6cdb08e29c08645f53f0dc93/legal/Linux-Legal-Metadata.md.
In this way we are able to redirect them to the runtime image of .NET used to build the final image.

@masesdevelopers
Copy link
Contributor Author

masesdevelopers commented Mar 14, 2024

Within the line

FROM mcr.microsoft.com/dotnet/runtime:6.0-jammy
try to use Ubuntu Chiseled image which is a striped image.

@masesdevelopers masesdevelopers self-assigned this Apr 30, 2024
@masesdevelopers masesdevelopers added enhancement New feature or request Docker Docker images related issue labels Apr 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment