From 7af6bad7f5bdce3861079da49e796a5440da453f Mon Sep 17 00:00:00 2001 From: Karl Haworth Date: Thu, 29 Feb 2024 10:10:01 -0500 Subject: [PATCH] add considerations Signed-off-by: Karl Haworth --- contrib/docker/secure-base-image/README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/contrib/docker/secure-base-image/README.md b/contrib/docker/secure-base-image/README.md index 6f3375b77f..b261bae9c7 100644 --- a/contrib/docker/secure-base-image/README.md +++ b/contrib/docker/secure-base-image/README.md @@ -3,3 +3,10 @@ DockerHub images in general did not seem ideal for Backstage as the number of vulnerabilities were quite high regardless of the image used. The `Dockerfile` in this directory uses a [`wolfi-base`](https://github.com/wolfi-dev) image from Chainguard Images. This improves the security of the application and reduces false positives in scanners. + +## Considerations + +- Wolfi only releases the `latest` tag for public consumption however digests can be pinned. +- Wolfi OS uses packages from the [os repository](https://github.com/wolfi-dev/os) on GitHub. Some packages may be named differently. +- While Wolfi uses `apk`, the OS is designed to support `glibc`. +- Due to the stripped down nature of the base image, additional packages might be needed compared to a distribution like Debian or Ubuntu.