What's the availability story? Docker Hub has pretty severe rate-limiting even if you're not an anonymous user.
No rate limiting or degradation of service for Community Edition. Same images, same registry as Enterprise Edition.
Minimus container images are now free
61–70 of 80 posts
Re: Minimus container images are now free
#62In the risk reduction tab, it should compare the vulnerability count against the node-slim image. In my eyes, it takes away from the offering when they try to prop up the vuln count for the official images, and nobody deploys `node:latest`.
Re: Minimus container images are now free
#63Earlier quoted context omitted.
1. These are all >1200 of our images, including FIPS, and all versions… others gate many of their images 2. These are all built continuously from upstream source on a distroless base… this makes a significant difference in attack surface and CVE count re DHI images and you can easily check our word with a few scans 3. These are truly free… no auth wall, no signup, no trial, no limit on numbers of images or pulls or a…
how can one be sure you don't do rugpull in the future?
Pull-through cache the images. Sure, they could decide you can't pull anymore, or impose problematic rate limits, but you shouldn't add a runtime dependency on their registry in any case.
Re: Minimus container images are now free
#64In the risk reduction tab, it should compare the vulnerability count against the node-slim image. In my eyes, it takes away from the offering when they try to prop up the vuln count for the official images, and nobody deploys `node:latest`.
> nobody deploys `node:latest`
Oh how I wish that were true.
Re: Minimus container images are now free
#65Earlier quoted context omitted.
how can one be sure you don't do rugpull in the future?
Pull-through cache the images. Sure, they could decide you can't pull anymore, or impose problematic rate limits, but you shouldn't add a runtime dependency on their registry in any case.
Yep, these are just normal OCI compliant images served from a normal OCI compliant registry. You can cache them however you'd like.
Re: Minimus container images are now free
#66In the risk reduction tab, it should compare the vulnerability count against the node-slim image. In my eyes, it takes away from the offering when they try to prop up the vuln count for the official images, and nobody deploys `node:latest`.
> nobody deploys `node:latest` Oh how I wish that were true.
Even the :latest is something of a wish :)
You may / may not be surprised how many enterprises still run long ago EOL'd versions of various stacks, frequently on full blown OS base layers of similar vintage
Re: Minimus container images are now free
#67I'm interested in using these images on exe.dev. exe supports any oci images and stands it up as a microvm, in which it would be used non-ephemerally from that point. I'm assuming the images don't have any rc/services. How hard would it be to pull that back in after image deployment? (Also looks like I'd want to use the -dev images which include shell/apk, etc)
Re: Minimus container images are now free
#68Thank you for this! Super valuable for contribution to all businesses. Suppose I want to add a custom PHP extension such as NewRelic, how would I go about adding that on your distroless images?
Re: Minimus container images are now free
#69John here (CTO and Co-Founder)… we’d be happy to answer any questions anyone has!
What can you say about long-term plans? The bitnami situation burned a lot of people I think, and yes we can cache your images, but switching providers still does not come for free.
Re: Minimus container images are now free
#70Is the cli open source? What about the images themselves?
An easy comparison is wolfi, which is completely open source.