Comments (2)
Yeah we don't do a great job of adding build information to the image. Perhaps we should add some labels into the image so you can just trace it back to the source?
tldr: the answer appears to be: 2.36-9+deb12u4
You can inspect the image to find the libc version, if you have a tool to do that, the distroless specific info file has the debian control info:
/var/lib/dpkg/status.d/libc6
Also, there are sboms published with images. For instance your image you can find the libc6 version (in my test, we got some repetition here, I'm not sure if we need to modify our sbom generation a bit, but the data is there:
$ cosign download attestation gcr.io/distroless/base-nossl-debian12:nonroot@sha256:51ab103bb161fdf8fee4c6311a2d41f484effc409d4f4c58342ab68b2da7ccc2 | jq -rcs '.[0].payload' | base64 -d | jq -r '.predicate' | jq -r '.packages.[] | select(.name == "libc6") | .versionInfo'
from distroless.
Thanks @loosebazooka. I am able to extract the version using above command.
from distroless.
Related Issues (20)
- openjdk-17 CVE patches - CVE-2024-20918, CVE-2024-20932 and CVE-2024-20952 HOT 3
- How to add msttcorefonts to the image HOT 4
- CVE-2023-52425 HOT 2
- MODULE_NOT_FOUND when starting any node application based on latest distroless images HOT 6
- CVE-2023-24329 HOT 1
- Using official Python base images and packaging into distroless later on HOT 1
- Should be based on Alpine HOT 1
- Reduce nodejs image size by removing /nodejs/include directory HOT 2
- Getting /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found error when using distroless base HOT 1
- Fix for CVE-2024-28085 HOT 6
- nuxt.js throws Error: Cannot find module '/app/node' HOT 4
- Merge /var/lib/dpkg/status.d/* HOT 1
- `static` tag is based on Debian 11 HOT 2
- use of non existing index.bzl file HOT 1
- CVE-2024-2961 HOT 3
- Docker image with distroless as a base image is throwing error while deploying to AWS EKS HOT 3
- How to install git on a distroless image? HOT 3
- add certificate to `gcr.io/distroless/java17-debian12:nonroot` HOT 2
- Adjusting the number of cores or gc config based upon cgroups HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from distroless.