Discussion: `apk` as deployment pipeline
AnotherDroog opened this issue · comments
Let’s figure out if it makes sense to bundle our tools as a apk
package for alpine.
What are the pros and cons?
apk add mana
would provide a convenient way to deploy
Sent with GitHawk
Cons:
Another development pipeline
We already have Docker
If our tools have dependencies, they get installed onto the host OS
Any dependencies that get installed increase the security footprint for the whole system, not just one docker image..
If dependencies have vulnerabilities, they have to be updated too
I generally agree with you @noaho. Especially if we can do build
stage and final
stage on Docker.