ubuntu-docker-images team mailing list archive

[Athos Ribeiro <athos.ribeiro@xxxxxxxxxxxxx>]

On Tue, Aug 03, 2021 at 12:59:45PM -0300, Emilia Torino wrote:
> On 3/8/21 11:57, Athos Ribeiro wrote:
> > Hi Emilia,
> >
> > On Fri, Jul 30, 2021 at 12:05:54PM -0300, Emilia Torino wrote:
> >
> > [snip...]
> >
> > > To confirm if the 3 git trees were present in both upstream based rocks
> > > we were considering, I locally got them (docker pull ubuntu/cortex &&
> > > docker image save etc, same for telegraf) and in both cases I see the
> > > upstream manifest empty. Is that correct?
> >
> > There was an issue with how we parse URLs from the Go package index
> > page. I proposed fixes for that and I will rebuild those images. I will
> > let you know once the new imags get tagged.
> >
> > Thanks for letting us know about this one.
>
> Amazing, thanks!

Telegraf and Cortex have been fixed and now do have the proper manifests
under the manifest directory.

> From my side, yesterday I updated the email subject for the CVEs
> notification service as agreed and also added cassandra to the monitored
> rocks for the USN notification service as requested. But based on your
> last comment and after inspecting the rock, I see I should remove it
> since its based on a snap, correct?

Right! Thanks for that, Emilia! Is the snap automatically monitored for
CVEs though?

> We dont have any specific process for you to notify us about new rocks
> to be monitored. Ideally whenever we have the rockstore at Canonical,
> this should not be needed at all. Meanwhile, if you can let us know by
> email or mm (me and amurray) its more than fine! But it is important to
> clarify what is based on (ubuntu/upstream/snap) to properly add it to
> the correct service.
>
> > [snip...]
> >
> > > We also agree prometheus, prometheus-alertmanager and grafana were out
> > > of this initial services, as were based on snaps. Is that still correct?
> >
> > I missed this one in my previous reply. Yes, this is still correct.
> > Cassandra is our new OCI which is also included in this group of snap
> > based images.
> >
> > [snip...]

--
Athos Ribeiro