Comment by a-nych
6 hours ago
I've created patched Dockerfiles for EOL PHP versions. The patch is obtained from official source trees.
I've also published the built images from them to GitHub Registry, but of course it's best to inspect any public repo/docker image before using them blindly.
One can inspect a GitHub repo sure but how can one usefully inspect a docker image provided by someone on the internet?
Usually by extracting the layers and looking through them. There's dive (https://github.com/wagoodman/dive) for making that easier.
I fail to see how that’s useful. Why would I care about the layers inside an image when I could just extract the entire filesystem inside. Even then it is not useful if we don’t have a culture of reproducible builds.
2 replies →