Request for a Node20-slim image (based on alpine)
Feature description
Can you make a node20-slim image available?
Apologies for the duplicate issue, I immediately forgot which repo you suggested I create the issue in: dsop/opensource/nodejs/nodejs-slim/nodejs18-slim#74
The Node18-slim image currently crashes when specifying NODE_EXTRA_CA_CERTS pointed at a volume.
The response to this issue several months ago suggested that the problem with NODE_EXTRA_CA_CERTS would be resolved in Node20, but that there were issues with the backport of the fix to Node18. dsop/opensource/nodejs/nodejs-slim/nodejs18-slim#20 (closed)
Since Node20 is LTS now, we'd love to have an IB base image for that.
Use cases
The node-slim image based on alpine scans with essentially zero vulnerabilities (or occasionally a few transient ones). We're a fairly lightweight NodeJS app so we really don't need all the baggage (both in size and vulnerabilities) that comes with a full UBI.
I know that most of the findings for debian and the RH-UBI are justified, or minor, or have exceptions, but we've gotten feedback from deployers saying they still feel better with a nice clean scan to start with. Some of them still use our alpine-based node-slim image from DockerHub, instead of the Iron Bank UBI version because of this, but they would love to get a node-slim version from IB.
Benefits
Much smaller image, much less vulnerability surface area, bugfixes from Node20.
Requirements
Support for providing NODE_EXTRA_CA_CERTS pointing at a volume, as opposed to requiring deployers to rebuild the containers themselves and incorporating their cert into their own image.
Links / references
dsop/opensource/nodejs/nodejs-slim/nodejs18-slim#20 (comment 1356535)
I noticed this issue requests a node20-slim image as well: dsop/opensource/nodejs/debian/nodejs-20#43
Tasks
-
Feature has been implemented
Please read the Iron Bank Documentation for more info