top | item 45048589

(no title)

notimetorelax | 6 months ago

Is anyone working on mirroring the images and keeping them updated?

discuss

order

mrweasel|6 months ago

Updating the Bitnami images is probably a bit of a challenge. From looking at them last year, I believe that they are build around a Bitnami style/framework. They are confusing at best.

If you're Bitnami it probably made sense to do it the image the way they did, but for everyone else, it's just a massive complication.

Personally I don't understand why anyone would have opted to use the Bitnami images for most things. They are really large and complex images and in most cases you'd probably be better of building your own images instead.

My guess is that there's a very small overlap between people who want to maintain Docker images, and the people who chose to run Bitnamis images.

tux3|6 months ago

The Docker images are complex for the sake of the Helm charts, which sometimes need to pass down tons of parameters

These aren't just for your laptop, they're supposed to be able to run in prod

I'm still stuck with 3 bitnami charts that I keep updated by building from source, which includes also building the images, all on our private registry.

miyuru|6 months ago

> Personally I don't understand why anyone would have opted to use the Bitnami images for most things.

At my previous company, we used it because of the low CVE counts. We needed to report the CVE count for every Docker image we used every month, so most of the images were from Bitnami.

There are many enterprise companies freeloading on Bitnami images, and I’m surprised it took Broadcom this long to make this change.

kappuchino|6 months ago

That only works for weeks or so, since they won't be updated, according to the PR.

It's time to build your own from core / foundational images - something I recently learned and now seek to master.

shellwizard|6 months ago

Would you kindly share how to do it?

runamok|6 months ago

In brief you need to switch the registry from (iirc) docker.io/bitnami to docker.io/bitnamilegacy. Note that as of iirc tomorrow those images will no longer be updated. So the moment there is a high or critical cve you better have a plan to use a new image and likely helm chart or send broadcom cash. The old registry will continue to have a "latest" tag but this should not be used for production.

finaard|6 months ago

According to the article the current situation already is a bit of a clusterfuck:

The Photon images provide many other benefits not previously available to users of Debian images, including:

  - Drastically reduced CVE count (e.g., 100+ CVEs to in some cases 0)