[
https://issues.apache.org/jira/browse/SOLR-15967?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17485826#comment-17485826
]
Jan Høydahl commented on SOLR-15967:
------------------------------------
I have never heard of anyone patching the base-image of a dockerized
application on a daily basis. Sure, you'd get newest versions of tools like
curl and other utilities installed with yum, and perhaps a Java update if java
was installed with yum. But what is the point with immutable container images
if you're going to treat it like you do with a plain old linux box and mutate
the image every single night? Some of your apps are bound to fail one day due
to an incompatible non-tested upgrade. An app's docker image should be as slim
as possible and only include the bare minimum required for that app to run. For
Solr ithat is a JRE and Jetty. Agree that when a CVE is discovered in Java or
Jetty it would make sense to refresh those. That can also be done by
re-building Solr's official Dockerfile, as it will pull updated version of the
base openjdk-jre image.
> Add rpm repo for red hat based distros
> --------------------------------------
>
> Key: SOLR-15967
> URL: https://issues.apache.org/jira/browse/SOLR-15967
> Project: Solr
> Issue Type: New Feature
> Security Level: Public(Default Security Level. Issues are Public)
> Components: packages
> Affects Versions: 8.11.1
> Environment: # uname -a
> Linux my.host 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022
> x86_64 x86_64 x86_64 GNU/Linux
> Reporter: Martin Häcker
> Priority: Major
> Labels: centos, centos7, debian, fedora, ubuntu
> Attachments: Skjermbilde 2022-02-01 kl. 15.17.02.png
>
>
> Hi there,
> it's surprisingly hard to install Solr in a way where I can guarantee to
> automatically get updates, especially security updates in a reliable manner,
> as well as get a documented way to start / run Solr on my distro of choice.
> What I am really looking for is an official rpm repository (and probably a
> deb repo too) that I can add to my package manager and then install a package
> that will give me all the updates I want, as well as starts the database with
> a systemd file that is known good.
> I in particular am looking for a centos 7 repository.
> I think, that this would make installation of Solr so much easier.
> What do you say?
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
