Conversation
Notices
-
Our 2nd registry is online as is clair static analysis of containers. We've also updated our registry browser that's located at https://docker.lollipopcloud.solutions
What does this mean?
Generally speaking: nothing for the day to day
For the data librarians: it means we have a deeper cache of ALL our mirroring, build output and more on our build lan in case something happens to our public registry. Even if such data doesn't land in the public registry.
For the security minded: it means the clair static analysis tool is being run against our builds and shows output now inside our docker registry browser. You'll see a lot of details that range from legitimate to useless. We deployed this as part of our transparency focus as well as our security minded approach to things.
Clair shows a lot of cruft that may or may not apply to an individual container and upstream projects aren't the best at updating their build dependencies. We prefer to build what the upstream projects publish officially so... some stuff may not be the most up-to-date or current....