8000 nftables: Install nft binary in base and distroless images by yxun · Pull Request #56363 · istio/istio · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

nftables: Install nft binary in base and distroless images #56363

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

nftables: Install nft binary in base and distroless images #56363

wants to merge 2 commits into from

Conversation

yxun
Copy link
Contributor
@yxun yxun commented May 20, 2025 •
edited
Loading

Hello, this change is related to #47821

We'd like to have the nft binary installed in the gcr.io/istio-release/base image. And then we can build istio images such as proxyv2 with nftables alternative tool and run commands for traffic redirection.

Following the comment in istio/tools#3209, this PR also includes the distroless image change.

The diff before/after adding nftables package in a distroless image is listed below:

Before adding it (quay.io/yuaxu/apko-istio:latest-amd64)
After adding it (quay.io/yuaxu/apko-istio:test-amd64)

...
$ apko build docker/iptables.yaml apko-istio:test apko-istio-nft.tar
$ docker load < apko-istio-nft.tar
$ docker run -it apko-istio:test-amd64 nft --version
nftables v1.1.3 (Commodore Bullmoose #4)
$ 
...

$ diff <(crane export quay.io/yuaxu/apko-istio:latest-amd64 - | tar -tvf - | sort) <(crane export quay.io/yuaxu/apko-istio:test-amd64 - | tar -tvf - | sort) | grep nft
> drwxr-xr-x root/root         0 2025-04-22 08:24 etc/nftables
> drwxr-xr-x root/root         0 2025-04-22 08:24 etc/nftables/osf
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/doc/nftables
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/doc/nftables/examples
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/nftables
> lrwxrwxrwx root/root         0 2025-04-22 08:24 usr/lib/libnftables.so.1 -> libnftables.so.1.1.0
> -rw-r--r-- root/root      1016 2025-04-22 08:24 usr/share/nftables/all-in-one.nft
> -rw-r--r-- root/root       128 2025-04-22 08:24 usr/share/nftables/netdev-ingress.nft
> -rw-r--r-- root/root       129 2025-04-22 08:24 usr/share/nftables/arp-filter.nft
> -rw-r--r-- root/root       137 2025-04-22 08:24 usr/share/nftables/ipv4-raw.nft
> -rw-r--r-- root/root       141 2025-04-22 08:24 usr/share/nftables/ipv6-raw.nft
> -rw-r--r-- root/root       182 2025-04-22 08:24 usr/share/nftables/ipv4-filter.nft
> -rw-r--r-- root/root       186 2025-04-22 08:24 usr/share/nftables/ipv6-filter.nft
> -rw-r--r-- root/root       187 2025-04-22 08:24 usr/share/nftables/inet-filter.nft
> -rw-r--r-- root/root       197 2025-04-22 08:24 usr/share/nftables/bridge-filter.nft
> -rw-r--r-- root/root       246 2025-04-22 08:24 usr/share/nftables/ipv4-nat.nft
> -rw-r--r-- root/root       251 2025-04-22 08:24 usr/share/nftables/inet-nat.nft
> -rw-r--r-- root/root       253 2025-04-22 08:24 usr/share/nftables/ipv6-nat.nft
> -rw-r--r-- root/root     28884 2025-04-22 08:24 etc/nftables/osf/pf.os
> -rw-r--r-- root/root        74 2025-04-22 08:24 usr/share/nftables/ipv4-mangle.nft
> -rw-r--r-- root/root        78 2025-04-22 08:24 usr/share/nftables/ipv6-mangle.nft
> -rw-rw-rw- root/root      2976 2025-04-22 08:24 var/lib/db/sbom/nftables-1.1.3-r0.spdx.json
> -rwxr-xr-x root/root   1007696 2025-04-22 08:24 usr/lib/libnftables.so.1.1.0
> -rwxr-xr-x root/root      1263 2025-04-22 08:24 usr/share/doc/nftables/examples/ct_helpers.nft
> -rwxr-xr-x root/root      1278 2025-04-22 08:24 usr/share/doc/nftables/examples/sets_and_maps.nft
> -rwxr-xr-x root/root      1858 2025-04-22 08:24 usr/share/doc/nftables/examples/load_balancing.nft
> -rwxr-xr-x root/root      2404 2025-04-22 08:24 usr/share/doc/nftables/examples/secmark.nft
> -rwxr-xr-x root/root     31000 2025-04-22 08:24 usr/bin/nft
$
  • Networking

@yxun
nftables: Install nft binary in base and distroless images
32d3d11 
Signed-off-by: Yuanlin Xu <yuanlin.xu@redhat.com>
@istio-policy-bot istio-policy-bot added area/networking release-notes-none Indicates a PR that does not require release notes. labels May 20, 2025
@istio-policy-bot
Copy link

😊 Welcome @yxun! This is either your first contribution to the Istio istio repo, or it's been
a while since you've been here.

You can learn more about the Istio working groups, Code of Conduct, and contribution guidelines
by referring to Contributing to Istio.

Thanks for contributing!

Courtesy of your friendly welcome wagon.

@istio-testing istio-testing added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label May 20, 2025
@istio-testing
Copy link
Collaborator

Hi @yxun. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@zirain
Copy link
Member
zirain commented May 20, 2025

/ok-to-test

@istio-testing istio-testing added ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. and removed needs-ok-to-test labels May 20, 2025
@yxun yxun mentioned this pull request May 20, 2025
Merged
@yxun
revert packaging.mk change
4620f37 
Signed-off-by: Yuanlin Xu <yuanlin.xu@redhat.com>
@yxun
Copy link
Contributor Author
yxun commented May 20, 2025

distroless image size comparison

REPOSITORY                         TAG                                               IMAGE ID       CREATED        SIZE
quay.io/yuaxu/apko-istio           latest-amd64                                      2a34b246878a   16 hours ago   11.7MB
apko-istio                         latest-arm64                                      c2ccf5b646a0   16 hours ago   17.2MB
quay.io/yuaxu/apko-istio           test-amd64                                        6680be923976   3 days ago     38.5MB
apko-istio                         test-arm64                                        d19295adb25f   3 days ago     41.6MB

@howardjohn
Copy link
Member

are you sure the size is right? the diff doesn't show a +30mb increase?

@yxun
Copy link
Contributor Author
yxun commented May 20, 2025 •
edited
Loading

are you sure the size is right? the diff doesn't show a +30mb increase?

I only pasted part of the diff above ( See the end of command : | grep nft). The whole diff is too long.

@yxun
Copy link
Contributor Author
yxun commented May 20, 2025

Here is the whole diff comparison:

$ diff <(crane export quay.io/yuaxu/apko-istio:latest-amd64 - | tar -tvf - | sort) <(crane export quay.io/yuaxu/apko-istio:test-amd64 - | tar -tvf - | sort)
22a23,34
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/a
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/d
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/g
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/k
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/l
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/p
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/s
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/t
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/v
> drwxr-xr-x root/root         0 2025-02-26 18:49 etc/terminfo/x
> drwxr-xr-x root/root         0 2025-02-26 18:49 usr/share/tabset
41d52
< drwxr-xr-x root/root         0 2025-04-10 15:11 etc
44d54
< drwxr-xr-x root/root         0 2025-04-10 15:11 usr/bin
46d55
< drwxr-xr-x root/root         0 2025-04-10 15:11 usr/share
50,63c59,81
< drwxr-xr-x root/root         0 2025-05-17 00:14 usr
< drwxr-xr-x root/root         0 2025-05-17 00:14 usr/lib
< drwxr-xr-x root/root         0 2025-05-17 00:14 var
< drwxr-xr-x root/root         0 2025-05-17 00:14 var/lib
< drwxr-xr-x root/root         0 2025-05-17 00:14 var/lib/db
< drwxr-xr-x root/root         0 2025-05-17 00:14 var/lib/db/sbom
< drwxr-xr-x root/root         0 2025-05-19 17:18 etc/apk
< drwxr-xr-x root/root         0 2025-05-19 17:18 etc/apk/commit_hooks.d
< drwxr-xr-x root/root         0 2025-05-19 17:18 etc/ld.so.conf.d
< drwxr-xr-x root/root         0 2025-05-19 17:18 lib
< drwxr-xr-x root/root         0 2025-05-19 17:18 usr/lib/audit
< drwxr-xr-x root/root         0 2025-05-19 17:18 usr/lib/locale
< drwxr-xr-x root/root         0 2025-05-19 17:18 usr/lib/locale/C.utf8
< drwxr-xr-x root/root         0 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_MESSAGES
---
> drwxr-xr-x root/root         0 2025-04-22 08:24 etc
> drwxr-xr-x root/root         0 2025-04-22 08:24 etc/nftables
> drwxr-xr-x root/root         0 2025-04-22 08:24 etc/nftables/osf
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/bin
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/lib
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/doc
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/doc/nftables
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/doc/nftables/examples
> drwxr-xr-x root/root         0 2025-04-22 08:24 usr/share/nftables
> drwxr-xr-x root/root         0 2025-04-22 08:24 var
> drwxr-xr-x root/root         0 2025-04-22 08:24 var/lib
> drwxr-xr-x root/root         0 2025-04-22 08:24 var/lib/db
> drwxr-xr-x root/root         0 2025-04-22 08:24 var/lib/db/sbom
> drwxr-xr-x root/root         0 2025-04-29 13:05 etc/apk
> drwxr-xr-x root/root         0 2025-04-29 13:05 etc/apk/commit_hooks.d
> drwxr-xr-x root/root         0 2025-04-29 13:05 etc/ld.so.conf.d
> drwxr-xr-x root/root         0 2025-04-29 13:05 lib
> drwxr-xr-x root/root         0 2025-04-29 13:05 usr/lib/audit
> drwxr-xr-x root/root         0 2025-04-29 13:05 usr/lib/locale
> drwxr-xr-x root/root         0 2025-04-29 13:05 usr/lib/locale/C.utf8
> drwxr-xr-x root/root         0 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_MESSAGES
65a84,104
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/s/screen.linux-s link to etc/terminfo/s/screen.linux
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/s/screen.minitel1b-80 link to etc/terminfo/s/screen.minitel12-80
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/s/screen.minitel2-80 link to etc/terminfo/s/screen.minitel12-80
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/s/screen.xterm-xfree86 link to etc/terminfo/s/screen.xterm-new
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-am link to etc/terminfo/v/vt100
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-bm-o link to etc/terminfo/v/vt100-bm
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100nam link to etc/terminfo/v/vt100-nam
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-s-bot link to etc/terminfo/v/vt100-bot-s
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-s-top link to etc/terminfo/v/vt100-s
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-top-s link to etc/terminfo/v/vt100-s
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-w-am link to etc/terminfo/v/vt100-w
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-w-nam link to etc/terminfo/v/vt100-nam-w
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt100-w-nav link to etc/terminfo/v/vt100-nav-w
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt200-8bit link to etc/terminfo/v/vt200-8
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220-8bit link to etc/terminfo/v/vt200-8
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220-8 link to etc/terminfo/v/vt200-8
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220-js link to etc/terminfo/v/vt200-js
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220 link to etc/terminfo/v/vt200
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220-old link to etc/terminfo/v/vt200-old
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/v/vt220-w link to etc/terminfo/v/vt200-w
> hrw-r--r-- root/root         0 2025-02-26 18:49 etc/terminfo/x/xterms link to etc/terminfo/x/xterm-24
66a106,116
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/bin/captoinfo -> tic
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/bin/infotocap -> tic
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/bin/reset -> tset
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/libformw.so.6 -> libformw.so.6.5
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/libmenuw.so.6 -> libmenuw.so.6.5
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/libncursesw.so.6 -> libncursesw.so.6.5
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/libpanelw.so.6 -> libpanelw.so.6.5
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/libtinfo.so.6 -> libtinfo.so.6.5
> lrwxrwxrwx root/root         0 2025-02-26 18:49 usr/lib/terminfo -> ../share/terminfo
> lrwxrwxrwx root/root         0 2025-03-03 18:37 usr/lib/libgmp.so.10 -> libgmp.so.10.5.0
> lrwxrwxrwx root/root         0 2025-03-03 18:37 usr/lib/libgmpxx.so.4 -> libgmpxx.so.4.7.0
67a118
> lrwxrwxrwx root/root         0 2025-03-10 19:52 usr/lib/libedit.so.0 -> libedit.so.0.0.68
79a131
> lrwxrwxrwx root/root         0 2025-04-06 15:09 usr/lib/libstdc++.so.6 -> libstdc++.so.6.0.33
129a182,184
> lrwxrwxrwx root/root         0 2025-04-22 08:24 usr/lib/libnftables.so.1 -> libnftables.so.1.1.0
> lrwxrwxrwx root/root         0 2025-04-29 13:05 lib/apk -> ../usr/lib/apk
> lrwxrwxrwx root/root         0 2025-04-29 13:05 usr/bin/ld.so -> ../../lib/ld-linux-x86-64.so.2
131,133c186
< lrwxrwxrwx root/root         0 2025-05-19 17:18 lib/apk -> ../usr/lib/apk
< lrwxrwxrwx root/root         0 2025-05-19 17:18 usr/bin/ld.so -> ../../lib/ld-linux-x86-64.so.2
< -r--r--r-- root/root       722 1969-12-31 19:00 etc/apko.json
---
> -r--r--r-- root/root       865 1969-12-31 19:00 etc/apko.json
136a190,193
> -rw-r--r-- root/root      1004 2025-02-26 18:49 etc/terminfo/s/sun
> -rw-r--r-- root/root      1004 2025-02-26 18:49 etc/terminfo/v/vt100+4bsd
> -rw-r--r-- root/root      1011 2025-02-26 18:49 etc/terminfo/x/xterm+pcf0
> -rw-r--r-- root/root      1016 2025-04-22 08:24 usr/share/nftables/all-in-one.nft
138c195,224
< -rw-r--r-- root/root       127 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_ADDRESS
---
> -rw-r--r-- root/root       104 2025-02-26 18:49 etc/terminfo/v/vt220+cvis
> -rw-r--r-- root/root      1049 2025-02-26 18:49 etc/terminfo/x/xterm+pcf2
> -rw-r--r-- root/root      1058 2025-02-26 18:49 etc/terminfo/x/xterm+88color2
> -rw-r--r-- root/root      1063 2025-02-26 18:49 etc/terminfo/x/xterm+direct
> -rw-r--r-- root/root      1064 2025-02-26 18:49 etc/terminfo/x/xterm+indirect
> -rw-r--r-- root/root      1065 2025-02-26 18:49 etc/terminfo/x/xterm+direct2
> -rw-r--r-- root/root      1066 2025-02-26 18:49 etc/terminfo/x/xterm+88color
> -rw-r--r-- root/root      1066 2025-02-26 18:49 etc/terminfo/x/xterm+pce2
> -rw-r--r-- root/root       108 2025-02-26 18:49 etc/terminfo/v/vt220+cvis8
> -rw-r--r-- root/root      1090 2025-02-26 18:49 etc/terminfo/x/xterm+256color2
> -rw-r--r-- root/root      1094 2025-02-26 18:49 etc/terminfo/x/xterm+r6f2
> -rw-r--r-- root/root      1098 2025-02-26 18:49 etc/terminfo/x/xterm+256color
> -rw-r--r-- root/root      1131 2025-02-26 18:49 etc/terminfo/x/xterm+direct16
> -rw-r--r-- root/root      1147 2025-02-26 18:49 etc/terminfo/v/vt100-nav
> -rw-r--r-- root/root       116 2025-02-26 18:49 etc/terminfo/p/putty+cursor
> -rw-r--r-- root/root       116 2025-02-26 18:49 etc/terminfo/p/putty+screen
> -rw-r--r-- root/root      1181 2025-02-26 18:49 etc/terminfo/v/vt100-nav-w
> -rw-r--r-- root/root      1185 2025-02-26 18:49 etc/terminfo/x/xterm+direct256
> -rw-r--r-- root/root      1245 2025-02-26 18:49 etc/terminfo/v/vt100-bm
> -rw-r--r-- root/root      1255 2025-02-26 18:49 etc/terminfo/v/vt102-nsgr
> -rw-r--r-- root/root      1265 2025-02-26 18:49 etc/terminfo/v/vt200-8
> -rw-r--r-- root/root       127 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_ADDRESS
> -rw-r--r-- root/root      1276 2025-02-26 18:49 etc/terminfo/v/vt102
> -rw-r--r-- root/root      1278 2025-02-26 18:49 etc/terminfo/v/vt125
> -rw-r--r-- root/root       128 2025-04-22 08:24 usr/share/nftables/netdev-ingress.nft
> -rw-r--r-- root/root      1282 2025-02-26 18:49 etc/terminfo/v/vt100
> -rw-r--r-- root/root      1282 2025-02-26 18:49 etc/terminfo/v/vt100-nam
> -rw-r--r-- root/root      1291 2025-02-26 18:49 etc/terminfo/v/vt100-putty
> -rw-r--r-- root/root       129 2025-04-22 08:24 usr/share/nftables/arp-filter.nft
> -rw-r--r-- root/root      1295 2025-02-26 18:49 etc/terminfo/v/vt100-w
139a226,235
> -rw-r--r-- root/root      1298 2025-02-26 18:49 etc/terminfo/v/vt102-w
> -rw-r--r-- root/root      1300 2025-02-26 18:49 etc/terminfo/v/vt132
> -rw-r--r-- root/root      1301 2025-02-26 18:49 etc/terminfo/x/xterm-r5
> -rw-r--r-- root/root       130 2025-02-26 18:49 etc/terminfo/x/xterm+noalt
> -rw-r--r-- root/root      1302 2025-02-26 18:49 etc/terminfo/v/vt100-vb
> -rw-r--r-- root/root      1313 2025-02-26 18:49 etc/terminfo/v/vt100-nam-w
> -rw-r--r-- root/root       132 2025-02-26 18:49 etc/terminfo/x/xterm+focus
> -rw-r--r-- root/root      1344 2025-02-26 18:49 etc/terminfo/v/vt100-bot-s
> -rw-r--r-- root/root       135 2025-02-26 18:49 usr/share/tabset/std
> -rw-r--r-- root/root      1360 2025-02-26 18:49 etc/terminfo/v/vt100-s
141c237,243
< -rw-r--r-- root/root      1406 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_COLLATE
---
> -rw-r--r-- root/root       137 2025-04-22 08:24 usr/share/nftables/ipv4-raw.nft
> -rw-r--r-- root/root      1389 2025-02-26 18:49 etc/terminfo/v/vt220-base
> -rw-r--r-- root/root      1391 2025-02-26 18:49 etc/terminfo/v/vt200
> -rw-r--r-- root/root      1406 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_COLLATE
> -rw-r--r-- root/root       141 2025-04-22 08:24 usr/share/nftables/ipv6-raw.nft
> -rw-r--r-- root/root      1415 2025-02-26 18:49 etc/terminfo/v/vt200-w
> -rw-r--r-- root/root       144 2025-02-26 18:49 etc/terminfo/x/xterm+alt1049
142a245,250
> -rw-r--r-- root/root      1457 2025-02-26 18:49 etc/terminfo/v/vt220-nam
> -rw-r--r-- root/root      1475 2025-02-26 18:49 etc/terminfo/v/vt200-old
> -rw-r--r-- root/root      1477 2025-02-26 18:49 etc/terminfo/x/xtermm
> -rw-r--r-- root/root      1481 2025-02-26 18:49 etc/terminfo/a/ansi
> -rw-r--r-- root/root      1489 2025-02-26 18:49 etc/terminfo/x/xterm-mono
> -rw-r--r-- root/root      1491 2025-02-26 18:49 etc/terminfo/x/xterm-r6
143a252,254
> -rw-r--r-- root/root      1493 2025-02-26 18:49 etc/terminfo/x/xterm-old
> -rw-r--r-- root/root       150 2025-02-26 18:49 etc/terminfo/x/xterm+titlestack
> -rw-r--r-- root/root       152 2025-02-26 18:49 etc/terminfo/x/xterm+alt47
145c256,282
< -rw-r--r-- root/root      1634 2025-05-19 17:18 etc/rpc
---
> -rw-r--r-- root/root      1524 2025-02-26 18:49 etc/terminfo/g/gnome-rh62
> -rw-r--r-- root/root      1533 2025-02-26 18:49 etc/terminfo/x/xterm-24
> -rw-r--r-- root/root      1537 2025-02-26 18:49 etc/terminfo/v/vt220d
> -rw-r--r-- root/root      1551 2025-02-26 18:49 etc/terminfo/x/xterm-color
> -rw-r--r-- root/root      1592 2025-02-26 18:49 etc/terminfo/x/xterm-bold
> -rw-r--r-- root/root       160 2025-02-26 18:49 usr/share/tabset/vt100
> -rw-r--r-- root/root      1607 2025-02-26 18:49 etc/terminfo/s/screen
> -rw-r--r-- root/root      1607 2025-02-26 18:49 etc/terminfo/s/screen.xterm-r6
> -rw-r--r-- root/root      1613 2025-02-26 18:49 etc/terminfo/s/screen4
> -rw-r--r-- root/root      1613 2025-02-26 18:49 etc/terminfo/s/screen-base
> -rw-r--r-- root/root      1618 2025-02-26 18:49 etc/terminfo/g/gnome-rh72
> -rw-r--r-- root/root      1619 2025-02-26 18:49 etc/terminfo/s/screen-bce
> -rw-r--r-- root/root       162 2025-02-26 18:49 etc/terminfo/x/xterm+tmux2
> -rw-r--r-- root/root      1623 2025-02-26 18:49 etc/terminfo/s/screen5
> -rw-r--r-- root/root      1623 2025-02-26 18:49 etc/terminfo/s/screen-w
> -rw-r--r-- root/root      1634 2025-04-29 13:05 etc/rpc
> -rw-r--r-- root/root      1641 2025-02-26 18:49 etc/terminfo/s/screen-s
> -rw-r--r-- root/root       164 2025-02-26 18:49 etc/terminfo/x/xterm+kbs
> -rw-r--r-- root/root      1644 2025-02-26 18:49 etc/terminfo/x/xtermc
> -rw-r--r-- root/root      1653 2025-02-26 18:49 etc/terminfo/g/gnome-rh80
> -rw-r--r-- root/root      1653 2025-02-26 18:49 etc/terminfo/v/vt100+
> -rw-r--r-- root/root      1656 2025-02-26 18:49 etc/terminfo/s/screen.minitel1-nb
> -rw-r--r-- root/root      1658 2025-02-26 18:49 etc/terminfo/x/xterm-pcolor
> -rw-r--r-- root/root      1674 2025-02-26 18:49 etc/terminfo/s/screen.minitel1
> -rw-r--r-- root/root      1700 2025-02-26 18:49 etc/terminfo/s/screen.teraterm
> -rw-r--r-- root/root      1709 2025-02-26 18:49 etc/terminfo/s/screen.putty-m2
> -rw-r--r-- root/root      1720 2025-02-26 18:49 etc/terminfo/s/screen.minitel1b-nb
147c284,327
< -rw-r--r-- root/root     20761 1969-12-31 19:00 usr/lib/apk/db/installed
---
> -rw-r--r-- root/root      1736 2025-02-26 18:49 etc/terminfo/s/screen.minitel1b
> -rw-r--r-- root/root      1737 2025-02-26 18:49 etc/terminfo/s/screen.putty-m1b
> -rw-r--r-- root/root      1740 2025-02-26 18:49 etc/terminfo/l/linux
> -rw-r--r-- root/root      1747 2025-02-26 18:49 etc/terminfo/s/screen-256color
> -rw-r--r-- root/root      1754 2025-02-26 18:49 etc/terminfo/s/screen-bce.linux
> -rw-r--r-- root/root      1754 2025-02-26 18:49 etc/terminfo/s/screen.linux
> -rw-r--r-- root/root      1758 2025-02-26 18:49 etc/terminfo/s/screen.minitel12-80
> -rw-r--r-- root/root      1759 2025-02-26 18:49 etc/terminfo/s/screen-256color-bce
> -rw-r--r-- root/root       176 2025-02-26 18:49 etc/terminfo/x/xterm+tmux
> -rw-r--r-- root/root      1765 2025-02-26 18:49 etc/terminfo/s/screen.putty-m1
> -rw-r--r-- root/root      1775 2025-02-26 18:49 etc/terminfo/s/screen-256color-s
> -rw-r--r-- root/root      1789 2025-02-26 18:49 etc/terminfo/s/screen-256color-bce-s
> -rw-r--r-- root/root      1802 2025-02-26 18:49 etc/terminfo/t/terminator
> -rw-r--r-
8000
- root/root       182 2025-02-26 18:49 etc/terminfo/x/xterm+alt+title
> -rw-r--r-- root/root       182 2025-04-22 08:24 usr/share/nftables/ipv4-filter.nft
> -rw-r--r-- root/root      1828 2025-02-26 18:49 etc/terminfo/x/xterm-basic
> -rw-r--r-- root/root      1837 2025-02-26 18:49 etc/terminfo/p/putty-m1b
> -rw-r--r-- root/root       186 2025-04-22 08:24 usr/share/nftables/ipv6-filter.nft
> -rw-r--r-- root/root       187 2025-04-22 08:24 usr/share/nftables/inet-filter.nft
> -rw-r--r-- root/root      1877 2025-02-26 18:49 etc/terminfo/s/screen-16color
> -rw-r--r-- root/root      1889 2025-02-26 18:49 etc/terminfo/s/screen-16color-bce
> -rw-r--r-- root/root      1895 2025-02-26 18:49 etc/terminfo/p/putty-m1
> -rw-r--r-- root/root      1907 2025-02-26 18:49 etc/terminfo/s/screen-16color-s
> -rw-r--r-- root/root      1913 2025-02-26 18:49 etc/terminfo/s/screen.linux-m2
> -rw-r--r-- root/root      1913 2025-02-26 18:49 etc/terminfo/x/xterm-8bit
> -rw-r--r-- root/root      1921 2025-02-26 18:49 etc/terminfo/s/screen-16color-bce-s
> -rw-r--r-- root/root      1941 2025-02-26 18:49 etc/terminfo/s/screen.linux-m1b
> -rw-r--r-- root/root      1955 2025-02-26 18:49 etc/terminfo/p/putty-m2
> -rw-r--r-- root/root      1971 2025-02-26 18:49 etc/terminfo/s/screen.linux-m1
> -rw-r--r-- root/root       197 2025-04-22 08:24 usr/share/nftables/bridge-filter.nft
> -rw-r--r-- root/root      1986 2025-02-26 18:49 etc/terminfo/x/xterm-xi
> -rw-r--r-- root/root      1988 2025-02-26 18:49 etc/terminfo/k/konsole+pcfkeys
> -rw-r--r-- root/root      1996 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v33
> -rw-r--r-- root/root      2006 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v32
> -rw-r--r-- root/root      2006 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v333
> -rw-r--r-- root/root      2009 2025-02-26 18:49 etc/terminfo/k/konsole-base
> -rw-r--r-- root/root      2036 2025-02-26 18:49 etc/terminfo/x/xterm+pcfkeys
> -rw-r--r-- root/root      2050 2025-02-26 18:49 etc/terminfo/v/vte+pcfkeys
> -rw-r--r-- root/root      2064 2025-02-26 18:49 etc/terminfo/g/gnome+pcfkeys
> -rw-r--r-- root/root      2085 2025-02-26 18:49 etc/terminfo/k/konsole-linux
> -rw-r--r-- root/root      2089 2025-02-26 18:49 etc/terminfo/k/konsole-vt420pc
> -rw-r--r-- root/root      2095 2025-02-26 18:49 etc/terminfo/k/konsole-solaris
> -rw-r--r-- root/root      2095 2025-02-26 18:49 etc/terminfo/k/konsole-vt100
> -rw-r--r-- root/root      2105 2025-02-26 18:49 etc/terminfo/k/konsole-xf3x
148a329
> -rw-r--r-- root/root      2212 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v40
150,153c331,371
< -rw-r--r-- root/root        23 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_MEASUREMENT
< -rw-r--r-- root/root       258 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_IDENTIFICATION
< -rw-r--r-- root/root       270 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_MONETARY
< -rw-r--r-- root/root       271 1969-12-31 19:00 etc/apk/world
---
> -rw-r--r-- root/root      2226 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v43
> -rw-r--r-- root/root      2240 2025-02-26 18:49 etc/terminfo/x/xterm-xfree86
> -rw-r--r-- root/root      2251 2025-02-26 18:49 etc/terminfo/s/screen.rxvt
> -rw-r--r-- root/root      2255 2025-02-26 18:49 etc/terminfo/s/screen.Eterm
> -rw-r--r-- root/root      2260 2025-02-26 18:49 etc/terminfo/x/xterm-xf86-v44
> -rw-r--r-- root/root      2261 2025-02-26 18:49 etc/terminfo/s/screen-bce.Eterm
> -rw-r--r-- root/root      2267 2025-02-26 18:49 etc/terminfo/s/screen-bce.rxvt
> -rw-r--r-- root/root        23 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_MEASUREMENT
> -rw-r--r-- root/root      2382 2025-04-06 15:09 usr/lib/libstdc++.so.6.0.33-gdb.py
> -rw-r--r-- root/root      2392 2025-02-26 18:49 etc/terminfo/t/terminology-0.6.1
> -rw-r--r-- root/root      2412 2025-02-26 18:49 etc/terminfo/s/st-0.6
> -rw-r--r-- root/root      2420 2025-02-26 18:49 etc/terminfo/x/xterm+nofkeys
> -rw-r--r-- root/root       246 2025-04-22 08:24 usr/share/nftables/ipv4-nat.nft
> -rw-r--r-- root/root      2476 2025-02-26 18:49 etc/terminfo/x/xterm-vt220
> -rw-r--r-- root/root      2498 2025-02-26 18:49 etc/terminfo/s/screen.putty
> -rw-r--r-- root/root      2510 2025-02-26 18:49 etc/terminfo/p/putty-vt100
> -rw-r--r-- root/root       251 2025-04-22 08:24 usr/share/nftables/inet-nat.nft
> -rw-r--r-- root/root      2530 2025-02-26 18:49 etc/terminfo/p/putty
> -rw-r--r-- root/root       253 2025-04-22 08:24 usr/share/nftables/ipv6-nat.nft
> -rw-r--r-- root/root      2548 2025-02-26 18:49 etc/terminfo/p/putty-noapp
> -rw-r--r-- root/root       258 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_IDENTIFICATION
> -rw-r--r-- root/root      2590 2025-02-26 18:49 etc/terminfo/s/screen.putty-256color
> -rw-r--r-- root/root      2600 2025-02-26 18:49 etc/terminfo/p/putty-screen
> -rw-r--r-- root/root      2606 2025-02-26 18:49 etc/terminfo/p/putty-sco
> -rw-r--r-- root/root      2608 2025-02-26 18:49 etc/terminfo/p/putty-256color
> -rw-r--r-- root/root      2620 2025-02-26 18:49 etc/terminfo/x/xterm-sco
> -rw-r--r-- root/root       262 2025-02-26 18:49 etc/terminfo/p/putty+keypad
> -rw-r--r-- root/root      2637 2025-02-26 18:49 etc/terminfo/s/st-0.8
> -rw-r--r-- root/root      2652 2025-02-26 18:49 etc/terminfo/x/xterm-hp
> -rw-r--r-- root/root       270 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_MONETARY
> -rw-r--r-- root/root      2705 2025-02-26 18:49 etc/terminfo/s/st-direct
> -rw-r--r-- root/root      2731 2025-02-26 18:49 etc/terminfo/s/st-0.7
> -rw-r--r-- root/root      2759 2025-02-26 18:49 etc/terminfo/s/st-256color
> -rw-r--r-- root/root       276 2025-02-26 18:49 etc/terminfo/x/xterm+meta
> -rw-r--r-- root/root      2784 2025-02-26 18:49 etc/terminfo/x/xterm-sun
> -rw-r--r-- root/root      2799 2025-02-26 18:49 etc/terminfo/s/st-16color
> -rw-r--r-- root/root      2800 2025-02-26 18:49 etc/terminfo/x/xterms-sun
> -rw-r--r-- root/root     28884 2025-04-22 08:24 etc/nftables/osf/pf.os
> -rw-r--r-- root/root      2897 2025-03-03 18:37 var/lib/db/sbom/gmp-6.3.0-r4.spdx.json
> -rw-r--r-- root/root      2924 2025-03-10 19:52 var/lib/db/sbom/libedit-3.1-r8.spdx.json
> -rw-r--r-- root/root      2927 2025-02-26 18:49 etc/terminfo/g/gnome-fc5
154a373,376
> -rw-r--r-- root/root      2939 2025-02-26 18:49 etc/terminfo/g/gnome-rh90
> -rw-r--r-- root/root      2979 2025-02-26 18:49 etc/terminfo/g/gnome-2007
> -rw-r--r-- root/root      2985 2025-02-26 18:49 etc/terminfo/v/vte-2007
> -rw-r--r-- root/root      3017 2025-02-26 18:49 etc/terminfo/g/gnome-2008
155a378
> -rw-r--r-- root/root      3023 2025-02-26 18:49 etc/terminfo/v/vte-2008
156a380,392
> -rw-r--r-- root/root      3027 2025-02-26 18:49 etc/terminfo/v/vte-2012
> -rw-r--r-- root/root      3029 2025-02-26 18:49 etc/terminfo/g/gnome
> -rw-r--r-- root/root      3039 2025-02-26 18:49 etc/terminfo/g/gnome-2012
> -rw-r--r-- root/root       308 2025-02-26 18:49 etc/terminfo/d/dumb
> -rw-r--r-- root/root      3123 2025-02-26 18:49 var/lib/db/sbom/ncurses-6.5_p20241228-r1.spdx.json
> -rw-r--r-- root/root      3125 2025-02-26 18:49 etc/terminfo/s/screen.mrxvt
> -rw-r--r-- root/root      3139 2025-02-26 18:49 etc/terminfo/s/screen-bce.mrxvt
> -rw-r--r-- root/root      3146 2025-02-26 18:49 etc/terminfo/s/screen.gnome
> -rw-r--r-- root/root      3154 2025-02-26 18:49 etc/terminfo/s/screen-bce.gnome
> -rw-r--r-- root/root      3185 2025-02-26 18:49 etc/terminfo/t/terminology-1.0.0
> -rw-r--r-- root/root      3221 2025-02-26 18:49 etc/terminfo/s/screen.mlterm
> -rw-r--r-- root/root      3221 2025-02-26 18:49 var/lib/db/sbom/ncurses-terminfo-base-6.5_p20241228-r1.spdx.json
> -rw-r--r-- root/root      3228 2025-02-26 18:49 etc/terminfo/v/vte-2014
158,161c394,408
< -rw-r--r-- root/root        33 2025-05-19 17:18 etc/ld.so.conf
< -rw-r--r-- root/root      3360 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_TIME
< -rw-r--r-- root/root      3376 2025-05-19 17:18 etc/ld.so.cache
< -rw-r--r-- root/root        34 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_PAPER
---
> -rw-r--r-- root/root      3267 2025-02-26 18:49 etc/terminfo/v/vte-2017
> -rw-r--r-- root/root      3299 2025-02-26 18:49 etc/terminfo/g/gnome-256color
> -rw-r--r-- root/root      3316 2025-02-26 18:49 etc/terminfo/t/tmux
> -rw-r--r-- root/root      3319 2025-02-26 18:49 etc/terminfo/s/screen.konsole
> -rw-r--r-- root/root        33 2025-04-29 13:05 etc/ld.so.conf
> -rw-r--r-- root/root      3325 2025-02-26 18:49 etc/terminfo/s/screen-bce.konsole
> -rw-r--r-- root/root      3339 2025-02-26 18:49 etc/terminfo/k/konsole
> -rw-r--r-- root/root      3360 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_TIME
> -rw-r--r-- root/root      3379 2025-02-26 18:49 etc/terminfo/k/konsole-xf4x
> -rw-r--r-- root/root      3391 2025-02-26 18:49 etc/terminfo/s/screen.mlterm-256color
> -rw-r--r-- root/root        34 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_PAPER
> -rw-r--r-- root/root      3458 2025-02-26 18:49 etc/terminfo/t/tmux-256color
> -rw-r--r-- root/root      3477 2025-02-26 18:49 etc/terminfo/s/screen.konsole-256color
> -rw-r--r-- root/root      3499 2025-02-26 18:49 etc/terminfo/x/xterm.js
> -rw-r--r-- root/root      3507 2025-02-26 18:49 etc/terminfo/k/konsole-256color
163c410,463
< -rw-r--r-- root/root    367708 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_CTYPE
---
> -rw-r--r-- root/root      3520 2025-02-26 18:49 etc/terminfo/s/screen.vte
> -rw-r--r-- root/root      3538 2025-02-26 18:49 etc/terminfo/v/vte-2018
> -rw-r--r-- root/root      3543 2025-02-26 18:49 etc/terminfo/k/konsole-direct
> -rw-r--r-- root/root      3546 2025-02-26 18:49 etc/terminfo/v/vte
> -rw-r--r-- root/root      3569 2025-02-26 18:49 etc/terminfo/t/terminology
> -rw-r--r-- root/root      3583 2025-02-26 18:49 etc/terminfo/t/terminology-1.8.1
> -rw-r--r-- root/root      3596 2025-02-26 18:49 etc/terminfo/t/tmux-direct
> -rw-r--r-- root/root      3625 2025-02-26 18:49 etc/terminfo/k/konsole-16color
> -rw-r--r-- root/root      3669 2025-02-26 18:49 etc/terminfo/s/screen-bce.xterm-new
> -rw-r--r-- root/root      3672 2025-02-26 18:49 etc/terminfo/s/screen.vte-256color
> -rw-r--r-- root/root    367708 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_CTYPE
> -rw-r--r-- root/root      3681 2025-02-26 18:49 etc/terminfo/s/screen.xterm-256color
> -rw-r--r-- root/root       368 2025-02-26 18:49 etc/terminfo/v/vt100+keypad
> -rw-r--r-- root/root       374 2025-02-26 18:49 etc/terminfo/x/xterm+sl
> -rw-r--r-- root/root      3744 2025-02-26 18:49 etc/terminfo/v/vte-direct
> -rw-r--r-- root/root       376 2025-02-26 18:49 etc/terminfo/x/xterm+sl-alt
> -rw-r--r-- root/root      3779 2025-02-26 18:49 etc/terminfo/a/alacritty
> -rw-r--r-- root/root      3783 2025-02-26 18:49 etc/terminfo/s/screen.xterm-new
> -rw-r--r-- root/root      3796 2025-02-26 18:49 etc/terminfo/v/vte-256color
> -rw-r--r-- root/root      3933 2025-02-26 18:49 etc/terminfo/x/xterm-noapp
> -rw-r--r-- root/root      3953 2025-02-26 18:49 etc/terminfo/x/xterm-x10mouse
> -rw-r--r-- root/root      3957 2025-02-26 18:49 etc/terminfo/x/xterm-1006
> -rw-r--r-- root/root      3957 2025-02-26 18:49 etc/terminfo/x/xterm-p370
> -rw-r--r-- root/root      3961 2025-02-26 18:49 etc/terminfo/x/xterm1
> -rw-r--r-- root/root      3965 2025-02-26 18:49 etc/terminfo/x/xterm-x11mouse
> -rw-r--r-- root/root      3971 2025-02-26 18:49 etc/terminfo/x/xterm-1005
> -rw-r--r-- root/root      3971 2025-02-26 18:49 etc/terminfo/x/xterm-new
> -rw-r--r-- root/root      3977 2025-02-26 18:49 etc/terminfo/x/xterm
> -rw-r--r-- root/root      3978 2025-02-26 18:49 etc/terminfo/x/xterm-1003
> -rw-r--r-- root/root      3980 2025-02-26 18:49 etc/terminfo/x/xterm-1002
> -rw-r--r-- root/root      3981 2025-02-26 18:49 etc/terminfo/x/xterm-x11hilite
> -rw-r--r-- root/root       398 2025-02-26 18:49 etc/terminfo/x/xterm+app+pc
> -rw-r--r-- root/root      3987 2025-02-26 18:49 etc/terminfo/x/xterm-nic
> -rw-r--r-- root/root      3991 2025-02-26 18:49 etc/terminfo/x/xterm-p371
> -rw-r--r-- root/root      3994 2025-02-26 18:49 etc/terminfo/x/xterm-utf8
> -rw-r--r-- root/root      4018 2025-02-26 18:49 etc/terminfo/x/xterm-direct2
> -rw-r--r-- root/root       402 1969-12-31 19:00 etc/apk/world
> -rw-r--r-- root/root       402 2025-02-26 18:49 etc/terminfo/v/vt100+noapp+pc
> -rw-r--r-- root/root       402 2025-02-26 18:49 etc/terminfo/x/xterm+sl-twm
> -rw-r--r-- root/root      4028 2025-02-26 18:49 etc/terminfo/x/xterm-direct
> -rw-r--r-- root/root      4039 2025-02-26 18:49 etc/terminfo/x/xterm-88color
> -rw-r--r-- root/root       404 2025-02-26 18:49 etc/terminfo/x/xterm+pc+edit
> -rw-r--r-- root/root      4071 2025-02-26 18:49 etc/terminfo/x/xterm-256color
> -rw-r--r-- root/root     40737 1969-12-31 19:00 usr/lib/apk/db/installed
> -rw-r--r-- root/root      4104 2025-02-26 18:49 etc/terminfo/x/xterm-direct16
> -rw-r--r-- root/root      4158 2025-02-26 18:49 etc/terminfo/x/xterm-direct256
> -rw-r--r-- root/root       418 2025-02-26 18:49 etc/terminfo/x/xterm+edit
> -rw-r--r-- root/root       420 2025-02-26 18:49 etc/terminfo/v/vt100+noapp
> -rw-r--r-- root/root       420 2025-02-26 18:49 etc/terminfo/x/xterm+noapp
> -rw-r--r-- root/root      4217 2025-02-26 18:49 etc/terminfo/x/xterm-16color
> -rw-r--r-- root/root       422 2025-02-26 18:49 etc/terminfo/x/xterm+app
> -rw-r--r-- root/root       428 2025-02-26 18:49 etc/terminfo/v/vt220+pcedit
> -rw-r--r-- root/root       432 2025-02-26 18:49 etc/terminfo/v/vt100+pfkeys
> -rw-r--r-- root/root      4352 2025-04-29 13:05 etc/ld.so.cache
164a465
> -rw-r--r-- root/root       445 2025-02-26 18:49 etc/terminfo/x/xterm+acs
166,168c467,475
< -rw-r--r-- root/root        47 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_TELEPHONE
< -rw-r--r-- root/root        48 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES
< -rw-r--r-- root/root        50 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_NUMERIC
---
> -rw-r--r-- root/root       462 2025-02-26 18:49 etc/terminfo/v/vt100+fnkeys
> -rw-r--r-- root/root       464 2025-02-26 18:49 etc/terminfo/x/xterm+vt+edit
> -rw-r--r-- root/root        47 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_TELEPHONE
> -rw-r--r-- root/root       474 2025-02-26 18:49 etc/terminfo/s/screen+fkeys
> -rw-r--r-- root/root       480 2025-02-26 18:49 etc/terminfo/v/vt220+keypad
> -rw-r--r-- root/root        48 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES
> -rw-r--r-- root/root       484 2025-02-26 18:49 etc/terminfo/x/xterm+decedit
> -rw-r--r-- root/root       488 2025-02-26 18:49 etc/terminfo/v/vt220+vtedit
> -rw-r--r-- root/root        50 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_NUMERIC
169a477
> -rw-r--r-- root/root       537 2025-02-26 18:49 etc/terminfo/x/xterm-vt52
170a479
> -rw-r--r-- root/root       591 2025-02-26 18:49 etc/terminfo/s/screen2
171a481
> -rw-r--r-- root/root       604 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+vt100
173,174c483,498
< -rw-r--r-- root/root        62 2025-05-19 17:18 usr/lib/locale/C.utf8/LC_NAME
< -rw-r--r-- root/root        64 2025-05-19 17:18 etc/ld.so.conf.d/libc.conf
---
> -rw-r--r-- root/root       612 2025-02-26 18:49 etc/terminfo/x/xterm+keypad
> -rw-r--r-- root/root       616 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys
> -rw-r--r-- root/root        62 2025-04-29 13:05 usr/lib/locale/C.utf8/LC_NAME
> -rw-r--r-- root/root       622 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+xterm
> -rw-r--r-- root/root       623 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+linux
> -rw-r--r-- root/root       626 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+esc
> -rw-r--r-- root/root       628 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+vt400
> -rw-r--r-- root/root       634 2025-02-26 18:49 etc/terminfo/s/screen3
> -rw-r--r-- root/root        64 2025-02-26 18:49 usr/share/tabset/vt300
> -rw-r--r-- root/root        64 2025-04-29 13:05 etc/ld.so.conf.d/libc.conf
> -rw-r--r-- root/root       660 2025-02-26 18:49 etc/terminfo/x/xterm+osc104
> -rw-r--r-- root/root       667 2025-02-26 18:49 etc/terminfo/v/vt200-js
> -rw-r--r-- root/root       680 2025-02-26 18:49 etc/terminfo/v/vt102+enq
> -rw-r--r-- root/root       682 2025-02-26 18:49 etc/terminfo/v/vt100+enq
> -rw-r--r-- root/root       690 2025-02-26 18:49 etc/terminfo/v/vt131
> -rw-r--r-- root/root       702 2025-02-26 18:49 etc/terminfo/s/screen+italics
175a500,501
> -rw-r--r-- root/root        74 2025-04-22 08:24 usr/share/nftables/ipv4-mangle.nft
> -rw-r--r-- root/root        78 2025-04-22 08:24 usr/share/nftables/ipv6-mangle.nft
176a503
> -rw-r--r-- root/root       794 2025-02-26 18:49 etc/terminfo/p/putty+fnkeys+sco
177a505,512
> -rw-r--r-- root/root       808 2025-02-26 18:49 etc/terminfo/x/xterm+nopcfkeys
> -rw-r--r-- root/root       824 2025-02-26 18:49 etc/terminfo/x/xterm+pcc0
> -rw-r--r-- root/root       824 2025-02-26 18:49 etc/terminfo/x/xterm+pcc1
> -rw-r--r-- root/root       839 2025-02-26 18:49 etc/terminfo/v/vt52
> -rw-r--r-- root/root       853 2025-02-26 18:49 etc/terminfo/x/xterm+x10mouse
> -rw-r--r-- root/root       869 2025-02-26 18:49 etc/terminfo/x/xterm+sm+1006
> -rw-r--r-- root/root       871 2025-02-26 18:49 etc/terminfo/x/xterm+x11mouse
> -rw-r--r-- root/root       876 2025-02-26 18:49 etc/terminfo/x/xterm+pcc2
178a514,516
> -rw-r--r-- root/root       883 2025-02-26 18:49 etc/terminfo/x/xterm+sm+1005
> -rw-r--r-- root/root       902 2025-02-26 18:49 etc/terminfo/x/xterm+pcc3
> -rw-r--r-- root/root       903 2025-02-26 18:49 etc/terminfo/x/xterm+x11hilite
179a518,524
> -rw-r--r-- root/root       928 2025-02-26 18:49 etc/terminfo/x/xterm+sm+1003
> -rw-r--r-- root/root       930 2025-02-26 18:49 etc/terminfo/x/xterm+sm+1002
> -rw-r--r-- root/root        95 2025-02-26 18:49 usr/share/tabset/stdcrt
> -rw-r--r-- root/root       972 2025-02-26 18:49 etc/terminfo/x/xterm+256setaf
> -rw-rw-rw- root/root      2975 2025-04-29 13:05 var/lib/db/sbom/glibc-2.41-r3.spdx.json
> -rw-rw-rw- root/root      2976 2025-04-22 08:24 var/lib/db/sbom/nftables-1.1.3-r0.spdx.json
> -rw-rw-rw- root/root      2996 2025-04-29 13:05 var/lib/db/sbom/ld-linux-2.41-r3.spdx.json
181d525
< -rw-rw-rw- root/root      3034 2025-05-19 17:18 var/lib/db/sbom/glibc-2.41-r4.spdx.json
184d527
< -rw-rw-rw- root/root      3055 2025-05-19 17:18 var/lib/db/sbom/ld-linux-2.41-r4.spdx.json
186c529,530
< -rw-rw-rw- root/root      3125 2025-05-19 17:18 var/lib/db/sbom/glibc-locale-posix-2.41-r4.spdx.json
---
> -rw-rw-rw- root/root      3063 2025-04-06 15:09 var/lib/db/sbom/libstdc++-14.2.0-r12.spdx.json
> -rw-rw-rw- root/root      3066 2025-04-29 13:05 var/lib/db/sbom/glibc-locale-posix-2.41-r3.spdx.json
188,189c532
< -rwxr-xr-x root/root   1052168 2025-05-19 17:18 lib/libm.so.6
< -rwxr-xr-x root/root   1062624 2025-05-19 17:18 lib/libmvec.so.1
---
> -rwxr-xr-x root/root   1007696 2025-04-22 08:24 usr/lib/libnftables.so.1.1.0
191c534
< -rwxr-xr-x root/root   1095888 2025-05-19 17:18 usr/bin/ldconfig
---
> -rwxr-xr-x root/root    110912 2025-02-26 18:49 usr/bin/tic
193,201c536,539
< -rwxr-xr-x root/root    119120 2025-05-19 17:18 lib/libnsl.so.1
< -rwxr-xr-x root/root     15144 2025-05-19 17:18 lib/libnss_dns.so.2
< -rwxr-xr-x root/root     15144 2025-05-19 17:18 lib/libnss_files.so.2
< -rwxr-xr-x root/root     15376 2025-05-19 17:18 lib/libanl.so.1
< -rwxr-xr-x root/root     15376 2025-05-19 17:18 lib/libutil.so.1
< -rwxr-xr-x root/root     15552 2025-05-19 17:18 lib/libdl.so.2
< -rwxr-xr-x root/root     15616 2025-05-19 17:18 lib/libBrokenLocale.so.1
< -rwxr-xr-x root/root     16216 2025-05-19 17:18 lib/librt.so.1
< -rwxr-xr-x root/root     16400 2025-05-19 17:18 lib/libpthread.so.0
---
> -rwxr-xr-x root/root  11927496 2025-04-29 13:05 lib/libc.so.6
> -rwxr-xr-x root/root      1263 2025-04-22 08:24 usr/share/doc/nftables/examples/ct_helpers.nft
> -rwxr-xr-x root/root      1278 2025-04-22 08:24 usr/share/doc/nftables/examples/sets_and_maps.nft
> -rwxr-xr-x root/root   1374520 2025-04-29 13:05 lib/ld-linux-x86-64.so.2
204a543
> -rwxr-xr-x root/root     17128 2025-02-26 18:49 usr/bin/clear
235a575
> -rwxr-xr-x root/root    174736 2025-04-29 13:05 lib/libnss_compat.so.2
264a605,606
> -rwxr-xr-x root/root     17712 2025-04-29 13:05 lib/libnss_dns.so.2
> -rwxr-xr-x root/root     17712 2025-04-29 13:05 lib/libnss_files.so.2
294c636
< -rwxr-xr-x root/root       183 2025-05-19 17:18 etc/apk/commit_hooks.d/ldconfig-commit.sh
---
> -rwxr-xr-x root/root       183 2025-04-29 13:05 etc/apk/commit_hooks.d/ldconfig-commit.sh
296a639,640
> -rwxr-xr-x root/root     18520 2025-04-29 13:05 lib/libanl.so.1
> -rwxr-xr-x root/root     18520 2025-04-29 13:05 lib/libutil.so.1
298a643
> -rwxr-xr-x root/root      1858 2025-04-22 08:24 usr/share/doc/nftables/examples/load_balancing.nft
299a645,646
> -rwxr-xr-x root/root     18824 2025-04-29 13:05 lib/libdl.so.2
> -rwxr-xr-x root/root     19576 2025-04-29 13:05 lib/libpthread.so.0
301c648,650
< -rwxr-xr-x root/root     22176 2025-05-19 17:18 lib/libmemusage.so
---
> -rwxr-xr-x root/root     20184 2025-02-26 18:49 usr/lib/libpanelw.so.6.5
> -rwxr-xr-x root/root    217256 2025-04-29 13:05 lib/libc_malloc_debug.so.0
> -rwxr-xr-x root/root     22000 2025-02-26 18:49 usr/bin/tabs
308d656
< -rwxr-xr-x root/root   2307792 2025-05-19 17:18 lib/libc.so.6
311c659,661
< -rwxr-xr-x root/root    246440 2025-05-19 17:18 lib/ld-linux-x86-64.so.2
---
> -rwxr-xr-x root/root      2404 2025-04-22 08:24 usr/share/doc/nftables/examples/secmark.nft
> -rwxr-xr-x root/root     24304 2025-04-29 13:05 lib/librt.so.1
> -rwxr-xr-x root/root    257904 2025-04-29 13:05 lib/libthread_db.so.1
314a665,667
> -rwxr-xr-x root/root    262480 2025-04-29 13:05 lib/libresolv.so.2
> -rwxr-xr-x root/root     26424 2025-02-26 18:49 usr/bin/toe
> -rwxr-xr-x root/root    264776 2025-03-10 19:52 usr/lib/libedit.so.0.0.68
317a671
> -rwxr-xr-x root/root   2765184 2025-04-29 13:05 lib/libmvec.so.1
318a673
> -rwxr-xr-x root/root    279688 2025-02-26 18:49 usr/lib/libncursesw.so.6.5
319a675,676
> -rwxr-xr-x root/root     29256 2025-04-29 13:05 lib/libBrokenLocale.so.1
> -rwxr-xr-x root/root    297360 2025-02-26 18:49 usr/lib/libtinfo.so.6.5
320a678,679
> -rwxr-xr-x root/root     31000 2025-04-22 08:24 usr/bin/nft
> -rwxr-xr-x root/root     31776 2025-02-26 18:49 usr/bin/tput
321a681
> -rwxr-xr-x root/root   3205928 2025-04-06 15:09 usr/lib/libstdc++.so.6.0.33
322a683,684
> -rwxr-xr-x root/root     35968 2025-02-26 18:49 usr/bin/tset
> -rwxr-xr-x root/root   3708808 2025-04-29 13:05 lib/libm.so.6
328,330c690,695
< -rwxr-xr-x root/root     49408 2025-05-19 17:18 lib/libnss_compat.so.2
< -rwxr-xr-x root/root     54464 2025-05-19 17:18 lib/libthread_db.so.1
< -rwxr-xr-x root/root     63848 2025-05-19 17:18 lib/libc_malloc_debug.so.0
---
> -rwxr-xr-x root/root     43272 2025-03-03 18:37 usr/lib/libgmpxx.so.4.7.0
> -rwxr-xr-x root/root     44384 2025-02-26 18:49 usr/lib/libmenuw.so.6.5
> -rwxr-xr-x root/root   4819984 2025-04-29 13:05 usr/bin/ldconfig
> -rwxr-xr-x root/root    513960 2025-04-29 13:05 lib/libnsl.so.1
> -rwxr-xr-x root/root     53888 2025-04-29 13:05 lib/libmemusage.so
> -rwxr-xr-x root/root    580640 2025-03-03 18:37 usr/lib/libgmp.so.10.5.0
332c697
< -rwxr-xr-x root/root     73168 2025-05-19 17:18 lib/libresolv.so.2
---
> -rwxr-xr-x root/root     75976 2025-02-26 18:49 usr/bin/infocmp
333a699
> -rwxr-xr-x root/root     94000 2025-02-26 18:49 usr/lib/libformw.so.6.5
$

@Stevenjin8
Copy link
Contributor

Wait, so the images are now 3x bigger? That doesn't seem right

@yxun
Copy link
Contributor Author
yxun commented May 21, 2025 •
edited
Loading

Wait, so the images are now 3x bigger? That doesn't seem right

It looks like duplicates of dependencies (different versions) between iptables and nftables. Because this PR change is adding nftables, the new image will have both existing iptables and new nftables with their own versions of dependencies.

Do you see anything wrong from my pasted diff above ?

I haven't got time investigating this distroless image build using apko. I will check if there is a way to reduce size after finishing some nftables unit tests.

@howardjohn
Copy link
Member

I get 4.4M -> 6.8M. Not sure how you are getting such a huge file...

howardjohn
howardjohn reviewed 6D47 May 21, 2025
View reviewed changes
Copy link
Member
@howardjohn howardjohn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure why its bringing in ncurses... The tools/build-base-images.sh test fails on this (not triggered in presubmit!)

@yxun
Copy link
Contributor Author
yxun commented May 21, 2025

oh, I was building this on Fedora 42 using the following commands.

$ apko build docker/iptables.yaml apko-istio:test apko-istio-nft.tar
$ docker load < apko-istio-nft.tar

Should I revert my change in the tools/build-base-images.sh about expectedfiles /usr/bin/nft ?

@howardjohn
Copy link
Member

I think there is a bug in the wolfi package though: https://kubernetes.slack.com/archives/C03MASRQP4M/p1747869530558059. Its pulling in too much

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@howardjohn howardjohn howardjohn left review comments

@costinm costinm Awaiting requested review from costinm costinm is a code owner

@linsun linsun Awaiting requested review from linsun linsun is a code owner

@stevenctl stevenctl Awaiting requested review from stevenctl stevenctl is a code owner

@keithmattix keithmattix Awaiting requested review from keithmattix keithmattix is a code owner

@hzxuzhonghu hzxuzhonghu Awaiting requested review from hzxuzhonghu hzxuzhonghu is a code owner

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
area/networking ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. release-notes-none Indicates a PR that does not require release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
6 participants
@yxun @istio-policy-bot @istio-testing @zirain @howardjohn @Stevenjin8
0