[ 
https://issues.apache.org/jira/browse/SOLR-15129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17282025#comment-17282025
 ] 

David Smiley commented on SOLR-15129:
-------------------------------------

See my comment [on PR 
1769|https://github.com/apache/lucene-solr/pull/1769#issuecomment-729210262]; I 
will copy:
bq. Wouldn't it be simpler for the release manager to build the docker image, 
examine the sha256 hash of the image, and publish that to the download 
location, making it official? Someone who wants to use the official Solr docker 
image who is ultra-paranoid can reference the image by hash like so:
bq. 
bq. docker run --rm 
solr@sha256:02fe5f1ac04c28291fba23a18cd8765dd62c7a98538f07f2f7d8504ba217284d
bq. That runs Solr 8.7, the official one. It's compact and can even be 
broadcasted easily in the release announcement for future Solr releases for 
people to get and run the latest release immediately, and be assured it's the 
correct one.
bq. 
bq. I wonder what other major Apache projects do.

CC [~janhoy]

RE asking official images folks -- thanks for the reminder

> Use the Solr TGZ artifact as Docker context
> -------------------------------------------
>
>                 Key: SOLR-15129
>                 URL: https://issues.apache.org/jira/browse/SOLR-15129
>             Project: Solr
>          Issue Type: Sub-task
>      Security Level: Public(Default Security Level. Issues are Public) 
>    Affects Versions: master (9.0)
>            Reporter: Houston Putman
>            Priority: Major
>
> As discussed in SOLR-15127, there is a need for a unified Dockerfile that 
> allows for release and local builds.
> This ticket is an attempt to achieve this by using the Solr distribution TGZ 
> as the docker context to build from.
> Therefore release images would be completely reproducible by running:
> {{docker build -f solr-9.0.0/Dockerfile 
> https://www.apache.org/dyn/closer.lua/lucene/solr/9.0.0/solr-9.0.0.tgz}}
> The changes to the Solr distribution would include adding a Dockerfile at 
> {{solr-<version>/Dockerfile}}, adding the docker scripts under 
> {{solr-<version>/docker}}, and adding a version file at 
> {{solr-<version>/VERSION.txt}}.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to