Hello,
Sorry for coming back to the topic here, but I (still) personally think
that defining "unqualified-search-registries" with sensible default
(dockerhub and quay.io?) is a better solution.
For what I understand, the two arguments here against are 1) it's not
up-to debian to choose the registries for the users 2) there are
security concerns about using random images.
IMVHO, it's still the role of a distribution to provide sensible
defaults to their users (lot/all packages are already doing so today in
the distribution). The fact that the package is adding that
shortnames.conf file (with a selected subset of images) is actually
forcing our users to use images (and not just repositories).
With unqualified-search-registries set, podman WILL ask the user from
where they want to pull the image from (currently nothing is asked),
this would actually allow the user to have MORE control and clarity over
the repository they uses.
I also not sure what would happen if the package maintainer would change
the content of that file to point to an other repository (let's say
because of a dispute), the user would start pulling an image they are
not expecting? With setting "unqualified-search-registries", the choice
of the user is preserved.
To that, I would also add that, AFAICS, debian is breaking expectation
for users coming from other distributions here.
So would it be possible to reconsider the solution here?
Kind regards,
Laurent Bigonville
