Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non-root user docker image for Loki. #1706

Merged
merged 1 commit into from
Mar 17, 2020

Conversation

cyriltovena
Copy link
Contributor

For best pratices. Fixes #1244 since the other CVE seems to be clear out now.

However promtail has couple of high and critical CVE when scanning using trivy but none
of them seems actionable as debian doesn't seems to want to fix them or include upstream fixes.

Signed-off-by: Cyril Tovena <cyril.tovena@gmail.com>
@codecov-io
Copy link

Codecov Report

Merging #1706 into master will decrease coverage by 0.02%.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##           master    #1706      +/-   ##
==========================================
- Coverage   62.56%   62.54%   -0.03%     
==========================================
  Files         112      112              
  Lines        8615     8615              
==========================================
- Hits         5390     5388       -2     
- Misses       2822     2823       +1     
- Partials      403      404       +1
Impacted Files Coverage Δ
pkg/logql/evaluator.go 91.63% <0%> (-0.65%) ⬇️

@slim-bean
Copy link
Collaborator

Is there a reason we wouldn't want to do this in promtail also?

@cyriltovena
Copy link
Contributor Author

No I want to but the image is more complex (debian) and I wanted to start with Loki first, see how it goes for a while.

@cyriltovena
Copy link
Contributor Author

Should we still merge this and tackle promtail later ?

@owen-d owen-d merged commit 45b51ef into grafana:master Mar 17, 2020
cyriltovena pushed a commit to cyriltovena/loki that referenced this pull request Jun 11, 2021
* Refactor enocding.Chunk.Add

Signed-off-by: Ganesh Vernekar <cs15btech11018@iith.ac.in>

* Undo pointer-to-slice changes in varbit

Signed-off-by: Bryan Boreham <bryan@weave.works>

* Error on setting Delta encoding

Signed-off-by: Ganesh Vernekar <cs15btech11018@iith.ac.in>

* Don't replace Delta with DoubleDelta

Signed-off-by: Ganesh Vernekar <cs15btech11018@iith.ac.in>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Twistlock scan failed or results unacceptable: docker.io/grafana/loki:latest
4 participants