Images should be rebulid / re-release periodically

[m4rc77]

The fabric8/java-centos-openjdk8-jre:latest is 5 Months old (today 18th of March 2021), the fabric8/java-alpine-openjdk8-jdk:latest image is one year old (today 18th of March 2021). In order to have the latest security updates from centos/alpine/... installed the images should be re-built periodically and new versions should be tagged in order to have stable "releases".

As a Workaround all images inheriting from fabric8/java-centos-openjdk8... base-images should perform a

# ensure that all base-image-dependencies are brought to the newest versions
RUN yum update -y

as a first step in the Dockerfile.

[manusa]

Hi @m4rc77,

Where are you using these images?

If I'm not mistaken, the main purpose of the fabric8io-images was to provide base images for Fabric8 Maven Plugin (FMP) which has now been deprecated in favor of Eclipse JKube.

Are you still using FMP? are you using the base images for something else? Is it feasable for you to switch to the new JKube base images?

[m4rc77]

Hi @manusa

Thanks for you hint.

The fabric8/java-centos-openjdk8-jre images were/are popular to run Java 8 fat-jar Java applications (e.g. SpringBoot based applications). I guess there are still a lot of them out in the wild running on container platforms.

In our case we either use the mentioned workaround with the yum update -y or switch to the UBI Java8 Image from RedHat (Image: registry.access.redhat.com/ubi8/openjdk-8:latest, Details see https://catalog.redhat.com/software/containers/ubi8/openjdk-8/5dd6a48dbed8bd164a09589a)