[
https://issues.apache.org/jira/browse/SOLR-15129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17282304#comment-17282304
]
Jan Høydahl commented on SOLR-15129:
------------------------------------
The base idea of using the official tgz as docker context would allow anyone to
first download the tgz, validate it, and then build the image in a reproducible
way. For end users, the fact that it is an official image, combined with
David’s sha validation is probably enough? We must then include in RM process
publishing the docker sha somewhere. Ideally that file would also be signed by
RM but if we want Jenkins to “refresh” images to patch Linux and Java, then the
sha would change and Jenkins would need to update some list of historically
valid sha’s per release, which again makes it harder for end users.
We need to satisfy both ASF policy and Docker-folks requirements. By bringing
the release under project control and using apache/solr as hub coordinates
we’re in a better shape re ASF. We should still consult @tianon whether our
proposal qualifies for a “link” from _/solr.
Can Hoss/Houston summarize our master plan in a docker-solr GitHub issue with a
question to @tianon ?
> Use the Solr TGZ artifact as Docker context
> -------------------------------------------
>
> Key: SOLR-15129
> URL: https://issues.apache.org/jira/browse/SOLR-15129
> Project: Solr
> Issue Type: Sub-task
> Security Level: Public(Default Security Level. Issues are Public)
> Affects Versions: master (9.0)
> Reporter: Houston Putman
> Priority: Major
>
> As discussed in SOLR-15127, there is a need for a unified Dockerfile that
> allows for release and local builds.
> This ticket is an attempt to achieve this by using the Solr distribution TGZ
> as the docker context to build from.
> Therefore release images would be completely reproducible by running:
> {{docker build -f solr-9.0.0/Dockerfile
> https://www.apache.org/dyn/closer.lua/lucene/solr/9.0.0/solr-9.0.0.tgz}}
> The changes to the Solr distribution would include adding a Dockerfile at
> {{solr-<version>/Dockerfile}}, adding the docker scripts under
> {{solr-<version>/docker}}, and adding a version file at
> {{solr-<version>/VERSION.txt}}.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
