Central DB unworkable slow

[Andrej van der Zee]

Hi,

We are trying to speed up our builds by having a Central DB within our corporate. We have tried with MySQL and MariaDB but the dependencyCheckUpdate is unworkable slow:

https://github.com/jeremylong/DependencyCheck/issues/1134

We are doing dockerized builds, meaning for every build we have to download all cves, process it and analyze. We have like 20+ builds in parallel causing downloads and builds to fail. We have explored mirroring, but we rather go for Center DB, because we cant wait 1:30 minutes extra for every build. 

Hope you can guide us setting this up!

Thanks,
Andrej

[Bernd Eckenfels]

You can prime the CVE database in your docker image, that will avoid the Downloads. (or you Mount a volume with the local copy into your container, but priming a Container (with repo artifacts and others) is a good idea anyway)

 

Gruss

Bernd

--
http://bernd.eckenfels.net

--
You received this message because you are subscribed to the Google Groups "Dependency Check" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dependency-che...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

 

[Andrej van der Zee]

Hi,

You can prime the CVE database in your docker image, that will avoid the Downloads. (or you Mount a volume with the local copy into your container, but priming a Container (with repo artifacts and others) is a good idea anyway)

The whole point is howto update that database. But I found now that the initial update of the MySQL database takes about 6 hours. Incremental updates afterward take just a minute. So this is workable, but I don't understand the insane increase in time for MySQL compared to H2.

Cheers,
Andrej

[Jeremy Long]

I haven't been able to figure out the increased time from H2 to MySQL either. However, for a central MySQL docker image have you looked at: https://hub.docker.com/r/stefanneuhaus/dependencycheck-central-mysql/

--Jeremy

--
You received this message because you are subscribed to the Google Groups "Dependency Check" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dependency-check+unsubscribe@googlegroups.com.