Selfhosted

60426 readers

332 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Do you rebuild your container images yourself? (lemmy.fromshado.ws)

submitted 6 months ago by eskuero@lemmy.fromshado.ws to c/selfhosted@lemmy.world

24 comments fedilink hide all child comments

I'm talking not only about trusting the distribution chain but about the situation where some services dont rebuild their images using updated bases if they dont have a new release.

So per example if the particular service latest tag was a year ago they keep distributing it with a year old alpine base...

you are viewing a single comment's thread
view the rest of the comments

[–] HotDog7@feddit.online 6 points 6 months ago (1 children)

I don't know enough about code to verify things myself. And I assume this applies for a lot of us here. So I just pray that nothing's fucked in the distribution chain.

[–] fizzle@quokk.au 6 points 6 months ago (1 children)

I'm also in this category, but OP is talking about something else.

Like if you use container-x, which has an alpine base. If it hasn't released a new version in several years then you're using a several year old alpine distro.

I didn't really realise this was a thing.

[–] HotDog7@feddit.online 0 points 6 months ago (1 children)

Ah, I have no idea what that is. I thought OP meant building stuff directly from Github (e.g. Ungoogled Chromium). Thanks for the clarification! :)

[–] fizzle@quokk.au 3 points 6 months ago

Containers have layers. So if you create an instance of a syncthing container whoever built that container would have started with some other container. Alpine linux is a very popular base layer, just used as an example in this discussion.

When you download an image, all the layers underlying the application that you actually wanted, will only be as fresh as the last time the maintainer built that image. So if there were a bug in the alpine base, that might have been fixed in alpine, but wouldn't by pushed through to whatever you downloaded.