4 ms·
Using docker means that you don't have to install any of these dependencies on your computer, and, if it's setup correctly, it runs sandboxes from the rest of m
by numbsafari 11y ago
Using docker means that you don't have to install any of these dependencies on your computer, and, if it's setup correctly, it runs sandboxes from the rest of my system. So it's not just about the "overhead".
- dsr_ 11y agoDoes docker have a single system to report included libraries up to management, so that when, for example, there's a major hole in openssl or nginx or a php library or the Chromium engine, I will immediately know which docker images are vulnerable and which I don't have to worry about? Because until that happens, the only way I can run docker images is when I've created them myself... and even then I really need a tool that does the above, so that I can rebuild them when the next CVE comes around.
- numbsafari 11y ago... so build them yourself. And keep them in your own repository. And build them on a base that you have analyzed. You can probably use whatever tooling you are using for that purpose today. They aren't voodoo.
- colhom 11y agoHave you heard of Claire? https://github.com/coreos/clair https://github.com/coreos/clair