Source: golang-github-containers-common
Version: 0.62.2+ds1-1
Severity: serious
Hello!
Sorry for not reporting this earlier, I noticed Debian doesn't take
shortnames.conf from the upstream source code release:
https://github.com/containers/shortnames/blob/main/shortnames.conf
and instead uses a vendored copy:
https://salsa.debian.org/go-team/packages/golang-github-containers-common/-/blob/debian/sid/debian/shortnames.conf?ref_type=heads
This file hasn't been updated since 2021, most notably the following
shortnames are missing:
- "archlinux" = "docker.io/library/archlinux"
- "golang" = "docker.io/library/golang"
- "rust" = "docker.io/library/rust"
Since `docker.io/library/` is an implied default in docker, it's very
common to have Dockerfiles start with `FROM rust`, `FROM golang` or
`FROM archlinux`, however since podman uses shortnames.conf instead of
this implied prefix, these `FROM` statements would only work with:
- /usr/bin/docker: yes
- /usr/bin/podman (on Arch Linux): yes
- /usr/bin/podman (on Debian): no
I'm filing this with severity "serious" because I think it should be
fixed before the upcoming release. I've seen a lot of people advising
beginners to "just use podman as a docker drop-in" or `alias
docker=podman`, but due to the outdated shortnames.conf this can lead to
very hard to troubleshoot problems for Debian users because some
Dockerfiles would fail to build with the root-cause being non-obvious
and the error can not be reproduced with podman from other Linux
distributions or with regular docker.
Feel free to downgrade the severity to 'important' however if that seems
more suitable for you, the issue could also qualify for "has a major
effect on the usability of a package, without rendering it completely
unusable to everyone".
thanks!
kpcyrd
