Switch to wolfi-base as the base image #438
Draft
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Keeping this as a draft for now because I'll have to change the resource's build pipeline before the checks will work. |
1f52277 to
37d3f45
Compare
We want to start compiling the resource types for AMD64 and ARM64 arch's. The Paketo images only release AMD64 images. Chainguard seems like a good alternative right now and should satisfy any security concerns users have. The newer version of git changed some error messages which broke a few tests. I moved proxytunnel into its own build stage so we don't carry over dependencies that were only required during its build. Locally on my mac, the wolfi-base version of the resource comes in at 123MB. Cross-compiling the Paketo-Jammy version results in a 598MB image locally. Signed-off-by: Taylor Silva <dev@taydev.net>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Related to concourse/concourse#9183
We want to start compiling the resource types for AMD64 and ARM64 arch's. The Paketo images only release AMD64 images. Chainguard seems like a good alternative right now and should satisfy any security concerns users have.
The newer version of git changed some error messages which broke a few tests.
I moved proxytunnel into its own build stage so we don't carry over dependencies that were only required during its build.
Locally on my mac, the wolfi-base version of the resource comes in at 123MB. Cross-compiling the Paketo-Jammy version results in a 598MB image locally.