Skip to content

v1.1.0 - Variant Tool Curation and Automated Base Builds

Choose a tag to compare

View all tags
@ibtisam-iq ibtisam-iq released this 09 Jul 04:01
· 25 commits to main since this release
v1.1.0
7cf993f

DebugBox v1.1.0

Variant tool curation, automated base image builds, and documentation overhaul.

Variant Tool Changes

Reorganized tools so each variant carries what it needs, nothing extra.

Balanced (~47 MB, down from ~51 MB):

  • Added: openssl (TLS debugging belongs in the daily driver, not power-only)
  • Added: sniff-http, sniff-dns, cert-check() shell helpers (previously power-only)
  • Removed: wget (redundant with curl), ethtool, iftop, iperf3, nmap (moved to power)

Power (~91 MB, down from ~112 MB):

  • Added: ethtool, iftop, iperf3, nmap (from balanced)
  • Removed: bird, bridge-utils, nano, py3-pip, speedtest-cli

Lite (~15 MB): No changes.

If you depend on a tool that moved, update your image tag accordingly. See Upgrade Notes below.

Automated Base Image Builds

The base image (debugbox-base) now has its own workflow (base.yml). It was previously built and pushed manually. The workflow triggers on changes to Dockerfile.base or the base profile, builds both architectures, runs Trivy, and pushes to GHCR.

All variant Dockerfiles now pin the base image by SHA digest instead of :latest for deterministic, reproducible builds.

Security Fixes

  • yq: v4.50.1 to v4.53.3, resolving 1 CRITICAL and 16 HIGH vulnerabilities
  • kubectx/kubens: v0.9.5 to v0.11.0, with golang.org/x/net patched to v0.55.0
  • Alpine base: 3.20 to 3.21

Infrastructure

  • Shell helpers externalized from Dockerfiles into standalone files under dockerfiles/profiles/
  • Release workflow restructured into parallel jobs (validate, build-and-scan, push)
  • Tag count: 20 to 22 per release (11 unique patterns x 2 registries)
  • Makefile: auto-detect host architecture, make run-<variant> target, make lint includes base
  • CI: switched to aquasecurity/trivy-action, upgraded all GitHub Actions to latest versions
  • Added: GitHub issue/PR templates, CODEOWNERS, Dependabot for Python dependencies
  • Added: example pod manifests for lite and balanced variants

Documentation

  • Site redesign: hero homepage with variant cards, indigo+amber color identity, social cards
  • Navigation: instant loading, back-to-top, search suggestions, header autohide
  • Restructured 15 pages to eliminate redundancy (-356 lines net)
  • README rewritten: 328 lines to 213, removed duplicated content, fixed inaccurate claims
  • Merged installation.md into quick-start.md

Image Tags

# Lite (~15 MB)
docker pull ghcr.io/ibtisam-iq/debugbox:lite-1.1.0

# Balanced (~47 MB) - Default
docker pull ghcr.io/ibtisam-iq/debugbox:1.1.0

# Power (~91 MB)
docker pull ghcr.io/ibtisam-iq/debugbox:power-1.1.0

Published to both GHCR (ghcr.io/ibtisam-iq/debugbox) and Docker Hub (docker.io/mibtisam/debugbox).

Upgrade Notes

If upgrading from v1.0.0:

  • Scripts using nmap, iperf3, iftop, or ethtool in balanced: switch to debugbox:power
  • Scripts using wget in balanced: switch to curl
  • nano, py3-pip, bird, bridge-utils, speedtest-cli are no longer in any variant

Links

Assets 2
Loading