Should you Upgrade Official Docker Hub Images in Production Environments?
Should you Upgrade Official Docker Hub Images in Production Environments?
复制标题
您应该在生产环境中升级官方 Docker Hub 镜像吗？
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
C. Bezemer
中科院分区：
文献类型：
--
作者：
Sara Gholami;Hamzeh Khazaei;C. Bezemer
Docker 是最流行的软件容器化技术之一，它允许用户部署 Docker 映像来创建和运行容器。虽然 Docker 镜像通过使用基于较新镜像的容器替换其容器来促进应用程序在生产环境中的部署和就地升级，但在此类镜像升级过程中，许多依赖项可能会立即发生变化，这可能是潜在的风险来源。在本文中，我们研究了 Docker Hub 上的官方 Docker 镜像，并探讨了这些镜像中的包是如何变化的。我们发现，不同类型的应用程序的包更改数量各不相同，并且更改的包通常是实用程序包。我们的研究首先对 Docker 镜像进行就地升级时的潜在风险进行了重要研究。
Docker, one of the most popular software containerization technologies, allows a user to deploy Docker images to create and run containers. While Docker images facilitate the deployment and in-place upgrading of an application in a production environment by replacing its container with one based on a newer image, many dependencies could change at once during such an image upgrade, which can potentially be a source of risk. In this paper, we study the official Docker images on Docker Hub and explore how packages are changing in these images. We found that the number of package changes varies across different types of applications and that often the changing packages are utility packages. Our study takes a first important look at potential risks when doing an in-place upgrade of a Docker image.
DOI：
10.1109/cluster.2019.8891000
发表时间：
2019-09
期刊：
2019 IEEE International Conference on Cluster Computing (CLUSTER)
影响因子：
--
作者：
Nannan Zhao;Vasily Tarasov;Hadeel Albahar;Ali Anwar;Lukas Rupprecht;Dimitrios Skourtis;Amit Warke;Mohamed Mohamed-Mohamed;A. Butt
通讯作者：
Nannan Zhao;Vasily Tarasov;Hadeel Albahar;Ali Anwar;Lukas Rupprecht;Dimitrios Skourtis;Amit Warke;Mohamed Mohamed-Mohamed;A. Butt