Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add os-release files to images #62

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

bobcallaway
Copy link

It would be helpful for image scanners to have /etc/os-release (symlinked to /usr/lib/os-release) included in these images. Right now when running prometheus/node-exporter in my cluster, the background image scanners are constantly complaining on every sweep that the OS source of the container can not be detected.

The one file is 267 bytes (plus the symlink) so it does not have a meaningful impact on image size.

fyi @SuperQ @sdurrheimer

Copy link
Member

@discordianfish discordianfish left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable but not feeling strongly either way.

@SuperQ
Copy link
Member

SuperQ commented Dec 23, 2024

I'm not sure we should do this. This copies in the Debian signature, which misrepresents what out BusyBox image is.

@bobcallaway
Copy link
Author

bobcallaway commented Dec 23, 2024

I'm not sure we should do this. This copies in the Debian signature, which misrepresents what out BusyBox image is.

It's your call of course, but since you're sourcing core components from Debian it made sense to me.

Another option is that you could still write a file to /etc/os-release but fill it with values that make sense for your use case (e.g. this is what distroless images do). I'm happy to change this PR to do that if you'd like.

@SuperQ
Copy link
Member

SuperQ commented Dec 23, 2024

Yes, adding a custom distroless os-release makes more sense to me. Interestingly I checked the official busybox container, it also does not have an os-release.

@bobcallaway
Copy link
Author

friendly ping - any thoughts on this updated PR?

@SuperQ
Copy link
Member

SuperQ commented Jan 3, 2025

Build is failing. 🤔

@bobcallaway
Copy link
Author

Build is failing. 🤔

https://app.circleci.com/pipelines/github/prometheus/busybox It was failing before for something unrelated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants