Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump up to go 1.23 and clean up Docker images #188

Merged
merged 1 commit into from
Feb 8, 2025
Merged

Bump up to go 1.23 and clean up Docker images #188

merged 1 commit into from
Feb 8, 2025

Conversation

kezhenxu94
Copy link
Member

@kezhenxu94 kezhenxu94 commented Feb 8, 2025

Dependencies license check depends on different programming language env and version, it’s unreasonable to include the env in the Docker image by default, this PR cleans the programming language tools from the Docker images to reduce the size from 350+M to ~36M

@wu-sheng
Copy link
Member

wu-sheng commented Feb 8, 2025

from 350+M to?

Verified

This commit was signed with the committer’s verified signature.
kezhenxu94 kezhenxu94
@kezhenxu94
Copy link
Member Author

from 350+M to?

Updated the description

@kezhenxu94 kezhenxu94 added this to the 0.7.0 milestone Feb 8, 2025
# specific language governing permissions and limitations
# under the License.

FROM apache/skywalking-eyes:latest
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How about we push version:latest-go-deps image as well to make it convenient?

Copy link
Member Author

@kezhenxu94 kezhenxu94 Feb 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How about we push version:latest-go-deps image as well to make it convenient?

I'm not sure whether it'll be convenient, people might be using different go version and it does not make things much better unless we want to push tens of tags for each Go version

@wu-sheng
Copy link
Member

wu-sheng commented Feb 8, 2025

350+M to ~36M It seems this is worth a new release. Just wonder whether #188 (comment) is worth.

@wu-sheng
Copy link
Member

wu-sheng commented Feb 8, 2025

Meanwhile, for our own user case, the main repo seems to require Java and Node to do dependency analysis, right? How are we going to support that?

@kezhenxu94
Copy link
Member Author

Meanwhile, for our own user case, the main repo seems to require Java and Node to do dependency analysis, right? How are we going to support that?

Simple. We are not using Docker to do that, we use the binary executable right in the system

@kezhenxu94
Copy link
Member Author

People who want to use dependencies check with Docker in their projects , they need to build their docker image based on the license-eye docker image, that would be a case by case scenario, some might need to install all of Go 1.19, Java, and npm, some might just need Go 1.23, I'm not going to release an image that contains these various tools.

@wu-sheng wu-sheng merged commit 966951c into main Feb 8, 2025
1 check passed
@wu-sheng wu-sheng deleted the docker branch February 8, 2025 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants