NHC to using ubi-micro

[Roy Golan]

NHC is now [1] using ubi-micro, the latest variant from Red Hat. If you want

some of the motivation for using ubi please read here [2], and specifically

read here about ubi-micro [3]. More specifically we now have quay posting

security scan status on NHC image because all the ubi layers are already

scanned. [4] - our status is green, no security issues.

Poison-Pill is coming up next to move from ubi to ubi-micro, for the exact

same reasons [5]

Thanks,

Roy

[1] https://github.com/medik8s/node-healthcheck-operator/pull/48

[2] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/building_running_and_managing_containers/index#con_understanding-the-ubi-standard-images_assembly_types-of-container-images

[3] https://www.redhat.com/en/blog/introduction-ubi-micro

[4] https://quay.io/repository/medik8s/node-healthcheck-operator/manifest/sha256:0af0d1fe8a4f684d78a54c213b33e5e8332998951432e816691b1ee15a5e45b7?tab=vulnerabilities

[5] https://github.com/medik8s/poison-pill/pull/73

[Nir Yehia]

Cool!

Poison pill can't use ubi-micro, at least not as-is, since it needs the "nsenter" binary which doesn't exist there:
$ docker run -i -t registry.access.redhat.com/ubi8/ubi-micro:latest bash
bash-4.4# nsenter
bash: nsenter: command not found

--
You received this message because you are subscribed to the Google Groups "medik8s" group.
To unsubscribe from this group and stop receiving emails from it, send an email to medik8s+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/medik8s/CAC_JqcnU%2B0q3Gr4RE-fM5KMxGx9aXyOawyZwDs9Qs6LCpWUBjA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Roy Golan]

On Sun, 11 Jul 2021 at 15:12, Nir Yehia <nye...@redhat.com> wrote:

Cool!

Poison pill can't use ubi-micro, at least not as-is, since it needs the "nsenter" binary which doesn't exist there:
$ docker run -i -t registry.access.redhat.com/ubi8/ubi-micro:latest bash
bash-4.4# nsenter
bash: nsenter: command not found

alright, lets see what provides it

[Roy Golan]

On Sun, 11 Jul 2021 at 15:32, Roy Golan <rgo...@redhat.com> wrote:

On Sun, 11 Jul 2021 at 15:12, Nir Yehia <nye...@redhat.com> wrote:

Cool!

Poison pill can't use ubi-micro, at least not as-is, since it needs the "nsenter" binary which doesn't exist there:
$ docker run -i -t registry.access.redhat.com/ubi8/ubi-micro:latest bash
bash-4.4# nsenter
bash: nsenter: command not found

alright, lets see what provides it

I couldn't get that installed on ubi-minimal as well