From 7140e40477a0fc81366645a19529ed697823a903 Mon Sep 17 00:00:00 2001 From: Raj Chaudhuri Date: Sat, 25 Mar 2023 17:09:08 +0530 Subject: [PATCH] Reweave begins --- reweave/README.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 reweave/README.md diff --git a/reweave/README.md b/reweave/README.md new file mode 100644 index 00000000..a26b842b --- /dev/null +++ b/reweave/README.md @@ -0,0 +1,23 @@ +# reweave + +This is an effort to create a modern build environment for weave net, and simultaneously upgrade dependencies and the go compiler version. + +This should solve some known problems, including: +* Incompatibility with some versions of CNI and containerd +* Vulnerabilities in the current weave images (2.8.1) +* Mismatch between the Docker Hub hosted weave:latest and weave:2.8.1 images +* Problems with multi-architecture images + +The current focus of this effort is running weave net as a CNI plugin on Kubernetes. As such, other parts of weave net, such as the docker plugin, may receive less attention. + +## Tasks + +* Document the old build process +* Create a new build process +* Build, generate and test current images +* Upgrade Go compiler version +* Scan images for CVEs +* While there are fixable CVEs: + * Upgrade dependencies using CVE list as guideline + * Build, generate new images, test + * Scan new images for CVEs