3 ms·

Because it's not the same. Just look at the docker package for Debian for example. It's like 3 years out of date and has an unsupported version of docker compos

Because it's not the same. Just look at the docker package for Debian for example. It's like 3 years out of date and has an unsupported version of docker compose.

Marsymars 3y ago
I use the docker.io and docker-compose packages in the stock Debian repository, and they seem to work perfectly fine? (Notably better than the Docker snap package that I tried to use, for that matter.)
- mardifoufs 3y ago
  That's okay, but it's still 4 years old. And it uses docker compose v1, which isn't supported by upstream and receives no security updates since 2021. Docker has gotten a lot better imo since version 20.xx. buildx and buildkit are really nice now, and there's very little downside to having an up to date version (no important breaking changes, and improved rootless mode). Afaik the issue is related to some go packaging troubles or something. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040417 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040417 Fwiw, I have never had any issues with docker on Ubuntu. Even on azureml, where VMs are by default provisioned only with Ubuntu+docker, it just really works.
  - Marsymars 3y ago
    > And it uses docker compose v1, which isn't supported by upstream and receives no security updates since 2021. Is there any actual security concern here? As far as I can tell, docker compose v1 has no outstanding CVEs, and has, in fact, never had any CVEs or needed/received any security updates. Plus the Debian version has received some patches as recently as 2023: https://metadata.ftp-master.debian.org/changelogs//main/d/docker-compose/docker-compose_1.29.2-6_changelog https://metadata.ftp-master.debian.org/changelogs//main/d/do...
    - mardifoufs 3y ago
      I don't disagree and I usually don't like the security argument for tools like docker compose, that's why I highlighted the features and improvements to docker more than security itself :) . It's just nice to have actual upstream bug fixes to an actually recent version instead of random backports and patches especially for a tool like docker. It's also nice to have the much improved tools of docker 20+. Plus, you literally get everything that's nice from Debian too. It's like Debian but with a different package "profile". Debian is perfect for some use cases but Ubuntu is great for others.
      - Marsymars 3y ago
        FWIW docker.io in Debian is currently at 20.10.24. This is a bit of a digression though, I don't actually have a problem with Ubuntu overall, I just found Debian to be better for my particular Docker-hosting needs.
SomeoneFromCA 3y ago
I use docker from the docker PPA: https://docs.docker.com/engine/install/debian/#install-using-the-repository https://docs.docker.com/engine/install/debian/#install-using...

Because it's not the same. Just look at the docker package for Debian for example. It's like 3 years out of date and has an unsupported version of docker compose.

Marsymars 3y ago

I use the docker.io and docker-compose packages in the stock Debian repository, and they seem to work perfectly fine? (Notably better than the Docker snap package that I tried to use, for that matter.)

mardifoufs 3y ago
That's okay, but it's still 4 years old. And it uses docker compose v1, which isn't supported by upstream and receives no security updates since 2021. Docker has gotten a lot better imo since version 20.xx. buildx and buildkit are really nice now, and there's very little downside to having an up to date version (no important breaking changes, and improved rootless mode). Afaik the issue is related to some go packaging troubles or something. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040417 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040417 Fwiw, I have never had any issues with docker on Ubuntu. Even on azureml, where VMs are by default provisioned only with Ubuntu+docker, it just really works.
- Marsymars 3y ago
  > And it uses docker compose v1, which isn't supported by upstream and receives no security updates since 2021. Is there any actual security concern here? As far as I can tell, docker compose v1 has no outstanding CVEs, and has, in fact, never had any CVEs or needed/received any security updates. Plus the Debian version has received some patches as recently as 2023: https://metadata.ftp-master.debian.org/changelogs//main/d/docker-compose/docker-compose_1.29.2-6_changelog https://metadata.ftp-master.debian.org/changelogs//main/d/do...
  - mardifoufs 3y ago
    I don't disagree and I usually don't like the security argument for tools like docker compose, that's why I highlighted the features and improvements to docker more than security itself :) . It's just nice to have actual upstream bug fixes to an actually recent version instead of random backports and patches especially for a tool like docker. It's also nice to have the much improved tools of docker 20+. Plus, you literally get everything that's nice from Debian too. It's like Debian but with a different package "profile". Debian is perfect for some use cases but Ubuntu is great for others.
    - Marsymars 3y ago
      FWIW docker.io in Debian is currently at 20.10.24. This is a bit of a digression though, I don't actually have a problem with Ubuntu overall, I just found Debian to be better for my particular Docker-hosting needs.

SomeoneFromCA 3y ago

I use docker from the docker PPA: https://docs.docker.com/engine/install/debian/#install-using-the-repository https://docs.docker.com/engine/install/debian/#install-using...