optimizely / optimizely/agent

[ENHANCEMENT] Distroless images for optimizely agent.

Open
#418 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

acknowledged enhancement
Dominant language
Go
Stars
34
Forks
26
PR merge metrics
No merged PRs in 30d

Description

Description

Namaste,

  1. Distroless images are small and per our security team's guidance at Google, we're required to use those images for our deployments. To that effect, we're making a feature request to add the ability to build distroless images
    in addition to images built from scratch and Alpine Linux.

  2. We'd appreciate the ability to build using podman.

  3. And the ability to deploy built container images to the Google Artifact Registry.

For more information about distroless, please see: https://github.com/GoogleContainerTools/distroless.

Benefits

Low attack surface.
High security standards.

Detail

We would like the ability to run:

   make \
     APP_VERSION=$(git rev-parse HEAD) \
     CONTAINERIZER=podman \
     IMAGE_TAG_PREFIX=<GAR-TAG> \
     ci_build_dockerimage_distroless push_image_distroless
Examples

Please see: https://github.com/GoogleContainerTools/distroless

Risks/Downsides

A little more tooling and build complexity.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Make targets ci_build_dockerimage_distroless and push_image_distroless, comparing them with the existing scratch and Alpine image targets. Check the requested podman containerizer and Google Artifact Registry tag flow, then verify that the documented make command builds and pushes the distroless image successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, go, google-cloud
Domain
build-system, cloud, devops
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.