Docker hardened images?

[samuk]

https://www.docker.com/blog/docker-hardened-images-for-every-developer/

Will the Cloudron apps move over to these (if they haven't already?)

[girish]

Have to see. There is a risk of using container images maintained by others. What if it suddenly becomes non-free etc. After all, docker has a history of changing pricing (including docker hub).

I would atleast like to move our base image but afaict they offer no hardened ubuntu image.

[timconsidine]

Yep, sounds like a power-grab move by the company Docker.
Sounds like the direct opposite of opensource free(dom) technology.
Happy to trust the Cloudron base image without it being hardened.

The next step will be you have to pay for a licence for a hardened image.

[robi]

How about we simply get a list of hardened items and apply the ones that make sense for Cloudron?

[nebulon]

We also have to see what this "hardened" in the end really means. Already we have a base image from a well known Ubuntu state and unlike with many upstream docker images we are not blindly updating those base layers during a rebuild, which could potentially pull in malicious broken packages.

If at all, I would be lots more worried about the actual apps, which pull in GBs of modules from like npm (looking at those nextjs apps...)