Greetings I was reviewing the security vulnerabilities of my production images, specifically the difference between the latest default Dockerfile configuration generated with mix phx.gen.release --docker, bullseye-20240423-slim [image] and Ubuntu’s recently released 24.04 LTS version, Noble Numb…

Sorted :+1: Missing latest images on docker hubs opened 07:38PM - 02 May 24 UTC (UTC) closed 04:20PM - 03 May 24 UTC (UTC) [03juan] 03juan …

I was surprised to see an ubuntu release without any vulnerabilities at all (even with low or unspecified severity)… But if we look now, it’s just as the usual same “vulnerable” packages… I guess the analyzing tool (Docker Scout) had just not yet finished at that time… I usually use Alpine images (…

Alpine is using musl instead of glibc. From what I remember musl was reported to be slower in the context of OTP runtime.

Huh, seriously? Do you have a link? I’d love to test.

[image] Using Alpine and musl instead of GNU libc affect performance? Questions / Help Yes, there’s a significant loss in performance with musl. I made a PR for OTP 27 that will remove these differences, the comment describes things in a bit more detail: Read from thi…

Thanks. Quite curious and informative. But in any case OTP 27 is due pretty soon (May 2024 IIRC) so it won’t matter. It’s a shame that an effort to disentangle the legacy horrible mess that is libc leads to discovering how many pieces of software rely on its leaky abstractions but oh well, real sof…

I should’ve mentioned the vulnerability arc was just what led me to the issue that the registry is missing the latest images. Classic X-Y problem, my bad. You’re 100% correct and I also suspected Scout hadn’t finished its scans, which is why I wanted to build and scan it locally to see what was goi…

The real issue in this thread is still pending: What’s the deal with hexbob and the outstanding noble images – Seinfeld

Elixir Programming Language Forum

Missing latest hub.docker.com/r/hexpm/elixir images built with ubuntu-noble-20240423

Questions & Help Questions

LostKobrakai April 30, 2024, 8:54am 5

Read from this post going forward.