Comments (3)
For what it's worth, we'd also be interested in this. We also need glibc and generally prefer images without any additional software for increased security.
from corretto-docker.
@anuraaga Thanks for the idea. This is something that's come up in conversations but we don't have a roadmap item for it (yet). Does the image you have work as expected? Any problems you've observed?
If you can share, we'd also like to know what influences your choice to use distroless vs e.g. Alpine Linux for deployments. That also helps us to choose and prioritize upcoming features.
from corretto-docker.
@davecurrie Thanks! Yeah I have used that image in some sample apps and have not run into any issues. Using the :debug
variant feels very much like Alpine since it provides busybox for troubleshooting scenarios.
A very similar image, which uses zulu instead of corretto but otherwise set up in almost the same way, has also worked great in production across Zipkin and its various storage backends (cassandra, kafka, elasticsearch). I think in general, this approach doesn't have gotchas (at the risk of speaking too soon :P)
https://github.com/openzipkin/docker-jre-full/blob/master/Dockerfile#L7
As for distroless vs Alpine Linux, most of my apps use gRPC or some other Netty-based framework. I have found Netty's TCNative-BoringSSL to perform at least as well as Java 11+ TLS, the bigger difference tends to be on apps with larger payloads. So it's a goto library for me and that requires a base image that includes glibc, meaning it doesn't work with Alpine. This is the #1 deciding factor for me and unfortunately is a hard yes / no, as opposed to e.g., comparing the image size itself. Other than that, less apps, such as Alpine's apk, means less chance of container security scanners triggering for the image - I think this is nice too but not a dealbreaker since Alpine is already quite small.
Hope this helps, let me know if you need anything more from me.
from corretto-docker.
Related Issues (20)
- Provide an alpine 3.18 based image HOT 4
- Upgrade Java version to patch 1:17.0.7+7-1.amzn2.1 HOT 4
- CVE-2023-2650 HOT 5
- corretto 20 based on AL2023 HOT 3
- PKIX path building failed when maven.wagon.http.ssl.insecure=true
- amazoncorretto:17.0.8 on distroless base missing libz.so.1 HOT 1
- Alpine images not found in public.ecr.aws HOT 2
- Update image to use latest Corretto version available HOT 2
- Digital Signature for the container image and a signed SBOM HOT 3
- linux/amd64 amazoncorretto:21 cant install software with yum, "SSL certificate problem: unable to get local issuer certificate" HOT 1
- libX11, fonts and alsa in -headless variants
- Provide an alpine 3.19 based image HOT 4
- JRE only images for other Java versions HOT 2
- SunCertPathBuilderException at image amazoncorretto:21 HOT 1
- Add definitions for ambiguous tags in docs HOT 1
- command not found HOT 2
- Amazon Corretto 22 is not available as an official image on Docker Hub HOT 3
- Upgrade alpine docker images to alpine 3.20 HOT 1
- Finding the unknown versions of mx4j and sjsxp HOT 1
- Cannot use JVMCI compiler: No JVMCI compiler found HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from corretto-docker.