Re: Tomcat in distroless image

2022-07-01 Thread Christopher Schultz
Thomas, On 6/30/22 13:52, Thomas Meyer wrote: Sadly currently Tomcat startup relies on shell script to bootstrap JVM process. In the light of distroless images (e.g. https://blog.chainguard.dev/introducing-apko-bringing-distroless-nirvana-to-alpine-linux/) What are you thoughts on packaging to

Food for thought: /dev/random vs /dev/urandom

2022-07-01 Thread Christopher Schultz
All, This war has been raging on for years. I for one consider myself "practical" when it comes to security. I think this write-up makes some good arguments, even if the top section is a little difficult to parse (it's sometimes tough to differentiate the author's words from that of the hypot

Re: Tomcat in distroless image

2022-07-01 Thread Aleksandar Lazic
On Thu, 30 Jun 2022 19:52:46 +0200 Thomas Meyer wrote: > Hi, > > Sadly currently Tomcat startup relies on shell script to bootstrap JVM > process. > > In the light of distroless images (e.g. > https://blog.chainguard.dev/introducing-apko-bringing-distroless-nirvana-to-alpine-linux/) > what are

RE: Tomcat in distroless image

2022-07-01 Thread Hiran CHAUDHURI
CONFIDENTIAL & RESTRICTED Just my 2 cents... Tomcat is based on Java. AFAIK java itself needs a wide range of 'OS services'. Is there some distributionless java image around? Hiran -Original Message- From: Thomas Meyer Sent: Thursday, June 30, 2022 19:53 To: users@tomcat.apache.org Su