[ 
https://issues.apache.org/jira/browse/SOLR-16523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630105#comment-17630105
 ] 

Shawn Heisey commented on SOLR-16523:
-------------------------------------

Why is this package installed?  Solr doesn't use it.  I used 'docker exec' to 
grep the entire container for "gosu" and couldn't find it being used anywhere.  
  Is there something that I am not seeing?
{code:java}
elyograg@smeagol:~/git/solr$ sudo docker exec -u root a4ad02aa5ad9 grep -r gosu 
/ 2> /dev/null | tee ~/out
Binary file /opt/java/openjdk/lib/modules matches
Binary file /proc/234/task/234/cmdline matches
Binary file /proc/234/cmdline matches
Binary file /usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so matches
Binary file /usr/sbin/gosu matches
/usr/share/doc/gosu/copyright:Upstream-Name: tianon/gosu
/usr/share/doc/gosu/copyright:Source: https://github.com/tianon/gosu
/var/lib/dpkg/info/gosu.list:/usr/sbin/gosu
/var/lib/dpkg/info/gosu.list:/usr/share/doc/gosu
/var/lib/dpkg/info/gosu.list:/usr/share/doc/gosu/changelog.Debian.gz
/var/lib/dpkg/info/gosu.list:/usr/share/doc/gosu/copyright
/var/lib/dpkg/info/gosu.md5sums:e89d316ca9ccffc2bbb1ac898bf4b8ab  usr/sbin/gosu
/var/lib/dpkg/info/gosu.md5sums:fecc95588c59ca6a2a29968b1cb76544  
usr/share/doc/gosu/changelog.Debian.gz
/var/lib/dpkg/info/gosu.md5sums:039fe0886b340ff0f2f8678bb0be64c7  
usr/share/doc/gosu/copyright
/var/lib/dpkg/status:Package: gosu
/var/lib/dpkg/status: The core of how "gosu" works is stolen directly from how 
Docker/libcontainer
/var/lib/dpkg/status: specified process and "gosu" itself is no longer resident 
or involved in the
/var/lib/dpkg/status: and punts them to the process invoking "gosu" and the 
process being invoked by
/var/lib/dpkg/status: "gosu", where they belong.
/var/lib/dpkg/status:Homepage: https://github.com/tianon/gosu
/var/lib/dpkg/status-old:Package: gosu
/var/lib/dpkg/status-old: The core of how "gosu" works is stolen directly from 
how Docker/libcontainer
/var/lib/dpkg/status-old: specified process and "gosu" itself is no longer 
resident or involved in the
/var/lib/dpkg/status-old: and punts them to the process invoking "gosu" and the 
process being invoked by
/var/lib/dpkg/status-old: "gosu", where they belong.
/var/lib/dpkg/status-old:Homepage: https://github.com/tianon/gosu
/var/log/apt/history.log:Commandline: apt-get -y install acl dirmngr lsof 
procps wget netcat gosu tini jattach
/var/log/apt/history.log:Install: acl:amd64 (2.2.53-6), libbsd0:amd64 
(0.10.0-1, automatic), lsof:amd64 (4.93.2+dfsg-1ubuntu0.20.04.1), gosu:amd64 
(1.10-1ubuntu0.20.04.1), jattach:amd64 (1.5-2), tini:amd64 (0.18.0-1), 
netcat:amd64 (1.206-1ubuntu1), netcat-openbsd:amd64 (1.206-1ubuntu1, automatic)
/var/log/apt/term.log:Selecting previously unselected package gosu.
/var/log/apt/term.log:Preparing to unpack 
.../7-gosu_1.10-1ubuntu0.20.04.1_amd64.deb ...
/var/log/apt/term.log:Unpacking gosu (1.10-1ubuntu0.20.04.1) ...
/var/log/apt/term.log:Setting up gosu (1.10-1ubuntu0.20.04.1) ...
/var/log/dpkg.log:2022-11-07 22:07:11 install gosu:amd64 <none> 
1.10-1ubuntu0.20.04.1
/var/log/dpkg.log:2022-11-07 22:07:11 status half-installed gosu:amd64 
1.10-1ubuntu0.20.04.1
/var/log/dpkg.log:2022-11-07 22:07:11 status unpacked gosu:amd64 
1.10-1ubuntu0.20.04.1
/var/log/dpkg.log:2022-11-07 22:07:11 configure gosu:amd64 
1.10-1ubuntu0.20.04.1 <none>
/var/log/dpkg.log:2022-11-07 22:07:11 status unpacked gosu:amd64 
1.10-1ubuntu0.20.04.1
/var/log/dpkg.log:2022-11-07 22:07:11 status half-configured gosu:amd64 
1.10-1ubuntu0.20.04.1
/var/log/dpkg.log:2022-11-07 22:07:11 status installed gosu:amd64 
1.10-1ubuntu0.20.04.1 {code}

> gosu binary version
> -------------------
>
>                 Key: SOLR-16523
>                 URL: https://issues.apache.org/jira/browse/SOLR-16523
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: Docker
>    Affects Versions: 8.11.2
>            Reporter: Ritchie Gu
>            Priority: Major
>
> I noticed that as part of the process, it's installing gosu and few other 
> packages 
> [https://github.com/apache/solr-docker/blob/main/8.11-slim/Dockerfile#L20,]
> The version of gosu gets installed is a bit of old, and do you have any plan 
> to install newer version gosu in?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to