SLoeuillet commented on issue #70229: URL: https://github.com/apache/doris/issues/70229#issuecomment-6641594624
One more point for slim-by-default: the debug tooling (`gdb`, `perf`/`pprof`, `iperf3`, `tcpdump`, `bpfcc-tools`, `strace`…) doesn't need to be in the runtime image. On Kubernetes ≥ 1.25, `kubectl debug -it <pod> --image=<tools-image> --target=<container> --profile=sysadmin` attaches it as an ephemeral container that shares the Doris process namespace, so `gdb -p` / `perf top` work unchanged. `apache/doris:debug-latest` could become that tools image. The production image then only needs glibc, the JDK, `mysql-client`, `iproute2`, `net-tools`, `curl`, `jq`, `ca-certificates` and `tzdata`, which is what `Dockerfile_base_slim` already has. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
