3 ms·

This is actually a very important point that gets ignored a lot. What will happen if public container images are no longer available for building your applicat

• Max_aaa 8y ago
  This is why we have a local registry and for any container that is goes to testing or production or is needed for builds should be build-able from source. We still need to figure out how to best tackle the issue of online repositories being taken down or vanishing. For now we run apt-mirror.
• Spivak 8y ago
  The same thing you do with any 3rd party dependency -- save a copy of the source. Pull from DockerHub all you want but keep the images and their sources in a private registry and deploy your actual services from that.
• nunez 8y ago
  The right answer is to use your own repository and pull those images in-house where they can be scanned and verified, I.e. , run a container from that image, scan it using security tools, then action from there. You can also kind-of recreate a Dockerfile from an image using docker history: https://stackoverflow.com/questions/19104847/how-to-generate-a-dockerfile-from-an-image https://stackoverflow.com/questions/19104847/how-to-generate... In the general case, it’s the same as a Ruby Gem or NodeJS module going away from rubygems or npmjs; once its gone, its gone