Hello,

I'm trying to implement some POC for licence compliance verification.

The solution is supposed to be tern+dockviz (tern for license compliance
analysis, dockviz for docker image dependency visualization to see how many
images are affected by some baseOS image license issues)

I found that there is a ticket regarding tern here:
https://jira.onap.org/projects/INT/issues/INT-1735

I've faced several challenges while trying to implement this:

1) As images are downloaded only by the node that runs the given
container I'd need to run tests on each of the nodes or force a single
node that the xtesting docker is running on to collect all onap images
(which would be time consuming).

2) Tern requires quite high permissions in order to work in docker:
   - access to docker socket (this is also true for dockviz)
   - access to /dev/fuse
   - running in privilaged mode (due to the above)


Currently I see two options of implementing this:

1) Run xtesting in privileged container, docker sock and fuse device passed
2) Run it natively on the host machine or in a VM

Please share your thoughts on those two or let me know if you have any
other ideas.


Best Regards

Alexander Mazuruk



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22573): https://lists.onap.org/g/onap-discuss/message/22573
Mute This Topic: https://lists.onap.org/mt/78708630/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to