-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Base docker image for openhorizon/amd64_exchange-api is nondeterministic #652
Comments
@johnwalicki I agree that using a specific version tag can be useful for branched releases of the Exchange, I am not sure this is beneficial as the default or for master. The Sbt setting in question can be overwritten at anytime during build-time. This allows any parties' devops team to synchronize and make an overt decision on what base image the Exchange uses for its container, regardless of where the source was pulled/forked from in the repository. |
ubi9.1 image is now available. registry.access.redhat.com/ubi9-minimal:9.1.0-1656 |
I still think pinning the exchange to specific UBI releases is a good idea so that we can be deterministic about the builds. |
@johnwalicki I would highly suggest not doing this as it means we do not pull in the latest security fixes during the build process. You can determine the version of the UBI base image used in a given Exchange-API container image by using
|
The
registry.access.redhat.com/ubi9-minimal:latest
will vary over time as:latest
changes every few weeks/months. Red Hat releases these ubi images on their schedule. This does not allow us to build and rebuild the Open Horizon exchange container with reliable results. That is especially important if we want to fork a branch for LTS or commercial product reasons.exchange-api/build.sbt
Line 108 in f7f010c
I propose we pin the Docker base image
registry.access.redhat.com/ubi9-minimal:latest
to a specific version. Then, the Open Horizon team can make an overt decision when, and if, the base image is built on a particular version. We can submit a PR to rebase and test on our release schedules.As of 11/07/2022, the current ubi9-minimal version is
9.0.0-1687
The text was updated successfully, but these errors were encountered: