Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

change argoexec to use alpine rather that debian #5720

Closed
alexec opened this issue Apr 20, 2021 · 1 comment · Fixed by #6006
Closed

change argoexec to use alpine rather that debian #5720

alexec opened this issue Apr 20, 2021 · 1 comment · Fixed by #6006
Labels
type/feature Feature request type/security Security related
Milestone

Comments

@alexec
Copy link
Contributor

alexec commented Apr 20, 2021

The Debian base image (10) has not been updated since 2019 and has 14 high severity vulnerabilities that are only fixed in 11 which will not be released for some months.

Using Alpine we can:

  • Reduce the vuln surface.
  • Have faster builds.
  • Have smaller images.
@alexec alexec added type/feature Feature request type/security Security related labels Apr 20, 2021
@alexec alexec added this to the v3.2 milestone Apr 20, 2021
@alexec
Copy link
Contributor Author

alexec commented Apr 20, 2021

Using alpine fixes all the problems.

alexec added a commit to alexec/argo-workflows that referenced this issue Apr 20, 2021
@alexec alexec linked a pull request Apr 20, 2021 that will close this issue
alexec added a commit that referenced this issue May 25, 2021
@alexec alexec mentioned this issue Jun 10, 2021
20 tasks
@sarabala1979 sarabala1979 mentioned this issue Jun 10, 2021
88 tasks
@alexec alexec mentioned this issue Jun 21, 2021
16 tasks
jfarrell added a commit to jfarrell/argo-workflows that referenced this issue Feb 28, 2022
Reverts back to previous argoexec baseimage of debian due to ARG_MAX limit
differences in debian versus alpine causing a regression in behavior.

reverts: PR argoproj#5720
jfarrell added a commit to jfarrell/argo-workflows that referenced this issue Feb 28, 2022
Reverts back to previous argoexec baseimage of debian due to ARG_MAX limit
differences in debian versus alpine causing a regression in behavior.

reverts: PR argoproj#5720
resolves: issues argoproj#7586
jfarrell added a commit to jfarrell/argo-workflows that referenced this issue Mar 2, 2022
Reverts back to previous argoexec baseimage of debian due to ARG_MAX limit
differences in debian versus alpine causing a regression in behavior.

reverts: PR argoproj#5720
resolves: issues argoproj#7586
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/feature Feature request type/security Security related
Projects
None yet
1 participant