Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple namespaces with multiple package managers #670

Closed
KeyboardNerd opened this issue Dec 11, 2018 · 1 comment
Closed

Multiple namespaces with multiple package managers #670

KeyboardNerd opened this issue Dec 11, 2018 · 1 comment
Assignees
Milestone

Comments

@KeyboardNerd
Copy link
Contributor

Description of Problem / Feature Request

When using multiple namespaces, a feature's namespace is currently determined by looking up existing namespaces from all ancestry layers including current layer, and check if the namespace's version format matches the feature's version format. If there's nothing found, we just give up.
https://github.com/coreos/clair/blob/master/worker.go#L367

In Clair, any namespace's version format is assumed.
e.g. https://github.com/coreos/clair/blob/master/ext/featurens/osrelease/osrelease.go#L86
For example, ubuntu is assumed to use dpkg, and therefore, dpkg is the version format.

This can false assumption under the fact that we can install or user another package manager.

Simple case:
base
Layer 1: Namespace = ubuntu:latest, there's no package manager database.
Layer 2: We detect a change in package manager database with Curl in Nix database.
leaf
Even though Curl doesn't have dpkg as its version format, it still by fact exists under ubuntu:latest.

Environment

  • Clair version/image: MASTER
  • Clair client name/version:
  • Host OS:
  • Kernel (e.g. uname -a):
  • Kubernetes version (use kubectl version):
  • Helm version (use helm version):
  • Network/Firewall setup:
@KeyboardNerd KeyboardNerd added priority/high important functionality component/worker labels Dec 11, 2018
@KeyboardNerd KeyboardNerd added this to the v3.0.0 milestone Dec 11, 2018
@KeyboardNerd KeyboardNerd self-assigned this Dec 11, 2018
@KeyboardNerd KeyboardNerd removed the priority/high important functionality label Mar 25, 2019
@hdonnay
Copy link
Member

hdonnay commented Aug 31, 2020

We’re declaring bug bankruptcy as part of the release process for a new major version of Clair. Please open a ticket in our issue tracker if you feel this still needs to be addressed, and we'll triage as part of our v4 development process. Thanks!

@hdonnay hdonnay closed this as completed Aug 31, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants