Kingdon Barrett
e84a000b92
Add one more BUILDPLATFORM as needed for down build
+ x1 more (try again) and it's linux/${TARGETARCH}
I thought that ${TARGETPLATFORM} was a thing according to this blog:
https://www.docker.com/blog/faster-multi-platform-builds-dockerfile-cross-compilation-guide/
but it doesn't seem to be there reliably, whereas ${TARGETARCH} is set.
Signed-off-by: Kingdon Barrett <kingdon@weave.works>
reweave
This is an effort to create a modern build environment for weave net, and simultaneously upgrade dependencies and the go compiler version.
This should solve some known problems, including:
- Incompatibility with some versions of CNI and containerd
- Vulnerabilities in the current weave images (2.8.1)
- Mismatch between the Docker Hub hosted weave:latest and weave:2.8.1 images
- Problems with multi-architecture images
The current focus of this effort is running weave net as a CNI plugin on Kubernetes. As such, other parts of weave net, such as the docker plugin, may receive less attention.
Tasks
Document the old build processOld build process documented in BUILDING-OLD.mdCreate a image scanning process and scan current imageImage scanning process created, scan reports generated for 2.8.1Create a new build processNew build process created, documented in BUILDING.mdBuild, generate and test current imagesBuilt and scanned v2.8.2-beta0- Upgrade Go compiler version
- Scan images for CVEs
- While there are fixable CVEs:
- Upgrade dependencies using CVE list as guideline
- Build, generate new images, test
- Scan new images for CVEs