Skip to content

[base] moving to buster slim - #374

Merged
truthbk merged 4 commits into
masterfrom
jaime/cvesbuster
Jul 27, 2020
Merged

[base] moving to buster slim#374
truthbk merged 4 commits into
masterfrom
jaime/cvesbuster

Conversation

@truthbk

@truthbk truthbk commented Jul 23, 2020

Copy link
Copy Markdown
Member

Note: Please remember to review the Datadog Contribution Guidelines
if you have not yet done so.

What does this PR do?

Updates the docker agent base image to use the more current buster slim

Motivation

More current, secure base image.

Testing Guidelines

An overview on testing
is available in our contribution guidelines.

Additional Notes

Anything else we should know when reviewing?

@olivielpeau olivielpeau left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's get a review from container-integration as well

Comment thread Dockerfile
DD_CONF_PROCFS_PATH="/host/proc"

# workaround for stretch-slim missing man dirs
RUN seq 1 8 | xargs -I{} mkdir -p /usr/share/man/man{}

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm curious, why is this necessary?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I actually have to check if it's still necessary with buster - on slim those directories are missing, I left it in there because it's a NOP if the directory structure is in place. Not having it in place was breaking the build with stretch-slim, it was a well documented issue.

@CharlyF CharlyF left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After reading about this issue in other repos I think this is the way forward.
They are recommending the same approach here debuerreotype/debuerreotype#10 (comment)

Thank you Jaime!

Comment thread Dockerfile
@@ -1,4 +1,4 @@
FROM debian:stretch
FROM debian:buster-20200607-slim

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why fixed date base? Using debian:buster-slim would be more aligned with what we do for Agent7

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reproducible builds. I personally think this is better. But if you have a strong opinion let me know, we can fix in a follow-up PR.

@truthbk
truthbk merged commit 5c18c2c into master Jul 27, 2020
@truthbk
truthbk deleted the jaime/cvesbuster branch July 27, 2020 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

4 participants