Skip to content

Conversation

@mthalman
Copy link
Member

@mthalman mthalman commented Dec 9, 2022

The latest servicing version of Mariner has caused a change in the expected packages that exist. We verify these expected packages for the distroless version and this new version has caused tzdata to be added and prebuilt-ca-certificates-base to be removed. This doesn't seem right and I'll continue to investigate what happened and log issues if necessary. But these changes update the tests to reflect the current status and unblock the build.

@ghost ghost added the area-infrastructure label Dec 9, 2022
@mthalman
Copy link
Member Author

mthalman commented Dec 9, 2022

Ok, looks like these changes were intentional to make distroless Mariner a drop-in replacement for Google distroless to better support AKS: microsoft/azurelinux#4247.

The addition of tzdata changes the minimal base image size from 3.3 MB to 4.1 MB.

The "removal" of prebuilt-ca-certificates-base is actually a good thing. That used to exist in the minimal base image but we install prebuilt-ca-certificates which should be a replacement of it but because of distroless being distroless, removal of replaced packages isn't done automatically by the way we install packages. So before we ended up with both packages when all we really wanted was prebuilt-ca-certificates. Now that is happening. So that part is good.

@mthalman mthalman merged commit 84b3ced into dotnet:main Dec 9, 2022
@mthalman mthalman deleted the distroless-pkgs branch December 9, 2022 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants