[feature] add comparison
This commit is contained in:
14
.github/workflows/docker.yml
vendored
14
.github/workflows/docker.yml
vendored
@@ -338,22 +338,20 @@ jobs:
|
|||||||
|
|
||||||
|
|
||||||
# README
|
# README
|
||||||
- name: github / checkout master
|
- name: github / checkout HEAD
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
run: |
|
run: |
|
||||||
git pull
|
git checkout HEAD
|
||||||
git checkout master
|
|
||||||
|
|
||||||
- name: docker / setup comparison images
|
- name: docker / setup comparison images
|
||||||
if: env.WORKFLOW_CREATE_COMPARISON == 'true'
|
if: env.WORKFLOW_CREATE_COMPARISON == 'true'
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
run: |
|
run: |
|
||||||
docker image prune -af
|
|
||||||
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }}
|
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }}
|
||||||
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }}
|
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }}
|
||||||
docker image ls &> ./docker.image.ls
|
docker image ls --filter "reference=${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }}" --format json | jq --raw-output '.Size' &> ./comparison.size0.log
|
||||||
echo "${PWD}"
|
docker image ls --filter "reference=${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }}" --format json | jq --raw-output '.Size' &> ./comparison.size1.log
|
||||||
cat ./docker.image.ls
|
docker run --entrypoint "/bin/sh" --rm ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }} -c id &> ./comparison.id.log
|
||||||
|
|
||||||
- name: github / create README.md
|
- name: github / create README.md
|
||||||
id: github-readme
|
id: github-readme
|
||||||
@@ -409,7 +407,7 @@ jobs:
|
|||||||
git add LICENSE
|
git add LICENSE
|
||||||
fi
|
fi
|
||||||
git commit -m "auto update README.md"
|
git commit -m "auto update README.md"
|
||||||
git push
|
git push origin HEAD:master
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
3
.json
3
.json
@@ -20,6 +20,9 @@
|
|||||||
"11notes/distroless",
|
"11notes/distroless",
|
||||||
"11notes/distroless:curl"
|
"11notes/distroless:curl"
|
||||||
]
|
]
|
||||||
|
},
|
||||||
|
"comparison":{
|
||||||
|
"image":"nginx:1.28.0-alpine-slim"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -9,9 +9,13 @@ ${{ github:> }}* This image does not ship with any critical or high rated CVE an
|
|||||||
${{ github:> }}* This image is created via a secure, pinned CI/CD process and immune to upstream attacks, most other images have upstream dependencies that can be exploited
|
${{ github:> }}* This image is created via a secure, pinned CI/CD process and immune to upstream attacks, most other images have upstream dependencies that can be exploited
|
||||||
${{ github:> }}* This image contains a proper health check that verifies the app is actually working, most other images have either no health check or only check if a port is open or ping works
|
${{ github:> }}* This image contains a proper health check that verifies the app is actually working, most other images have either no health check or only check if a port is open or ping works
|
||||||
${{ github:> }}* This image works as read-only, most other images need to write files to the image filesystem
|
${{ github:> }}* This image works as read-only, most other images need to write files to the image filesystem
|
||||||
|
${{ github:> }}* This image is a lot smaller than most other images
|
||||||
|
|
||||||
If you value security, simplicity and the ability to interact with the maintainer and developer of an image. Using my images is a great start in that direction.
|
If you value security, simplicity and the ability to interact with the maintainer and developer of an image. Using my images is a great start in that direction.
|
||||||
|
|
||||||
|
${{ content_comparison }}
|
||||||
|
|
||||||
|
|
||||||
${{ title_config }}
|
${{ title_config }}
|
||||||
```yaml
|
```yaml
|
||||||
${{ include: ./rootfs/etc/nginx/nginx.conf }}
|
${{ include: ./rootfs/etc/nginx/nginx.conf }}
|
||||||
|
|||||||
Reference in New Issue
Block a user