← Back to context

Comment by janmo

12 hours ago

Still no release for Ubuntu... They are already half an hour late. Debian got the patch almost immediately...

if it makes you feel any better, the official dockerhub images aren't ready yet either.

  • They had almost a full day to prepare for this...

    • I'm starting to suspect that they actually got the notice the same time we did, because if they got the patches there should be no reason it wasn't already built and ready to go (unless they're scared that "our build servers are public and everyone will know" so they literally held everything off until the release which seems so counterproductive as to be ... well, open-source silliness).

  • If you mean docker official images, it's just the "community" maintaining it, eg "some dudes". By no means should you consider it a mechanism to get timely security updates, I've seen horrible lag on that before.

    Most of docker is like this. Images provided by volunteers, and not related to the project. Using docker images you don't maintain yourself, and at least don't upgrade yourself, is not the best recipe for security.

    (It's pretty trivial to build your own)

    • > If you mean docker official images, it's just the "community" maintaining it, eg "some dudes".

      This is false. The Docker Official Images team (i.e. the folks with write access to the docker-library/* organization) are Docker employees.

    • I wasn't aware of that. So I guess it's generally better to just use plain debian images and just install the required packages with apt.

      3 replies →

    • welp, I guess I should have done my research into what "docker official images" actually means.

Debian has had the patch for days, as have other main distros, and tested and prepared the release. That's why it was instant.

Unclear why Ubuntu is lagging.

Why do people still use Ubuntu?

They gave away CDs 20 years ago for free. Cooool.

Fedora is best for desktop.

Debian for servers that never need updates (but I even use Fedora for server now adays)