containers VS minideb

There are multiple benefits of using the images from Bitnami. We can refer to their github repo for additional details. The Bitnami image from cassandra provides us the option to override few of the configurations in the cassandra.yaml file by passing the values as environment variables. For eg: When we provide an environment variable - CASSANDRA_CLUSTER_NAME – to the container, the value of this variable gets updated in the cassandra.yaml -> cluster_name field.

Have a look at the postgresql readme file to see the value they add: https://github.com/bitnami/containers/tree/main/bitnami/post...

When you use a bunch of different containers from Bitnami, you'll start to notice common configuration patterns which make managing the containers easier.

On the flipside, the additional configuration sometimes contradicts to the official documentation, so that can add complexity from time to time.

https://github.com/bitnami/containers https://bitnami.com/stack/mariadb/containers

git clone https://github.com/bitnami/containers.git cd bitnami/APP/VERSION/OPERATING-SYSTEM

mongodb 15:53:35.21 INFO ==> ** Starting MongoDB ** mongodb 15:54:35.83 mongodb 15:54:35.83 Welcome to the Bitnami mongodb container mongodb 15:54:35.83 Subscribe to project updates by watching https://github.com/bitnami/containers mongodb 15:54:35.83 Submit issues and feature requests at https://github.com/bitnami/containers/issues mongodb 15:54:35.83 mongodb 15:54:35.83 INFO ==> ** Starting MongoDB setup ** mongodb 15:54:35.85 INFO ==> Validating settings in MONGODB_* env vars... mongodb 15:54:36.08 WARN ==> You set the environment variable ALLOW_EMPTY_PASSWORD=yes. For safety reasons, do not use this flag in a production environment. mongodb 15:54:36.09 INFO ==> Initializing MongoDB... mongodb 15:54:36.13 INFO ==> Deploying MongoDB with persisted data... mongodb 15:54:36.15 INFO ==> ** MongoDB setup finished! ** mongodb 15:54:36.16 INFO ==> ** Starting MongoDB **

Is the chart pulling in the default bitnami/wordpress container?

I can't comment on ARM because all of my workloads are x86, but the Bitnami containers are almost always a good bet: https://bitnami.com/stacks/containers

Currently I build all of my language runtime containers myself (such as Java, Python, .NET, Node and so on) for the sake of simplicity and common tools, but when I'm dealing with something more complex to configure or turnkey software (think along the lines of Keycloak, MinIO, RabbitMQ, Redis, as well as databases like MariaDB or PostgreSQL), then I often just go with what Bitnami is offering. Here's their GitHub with a bit more information about why someone might use their images: https://github.com/bitnami/containers

Of course, do have a look at their instructions, because in the case of some of their images there can be some differences from the alternatives, for example: https://blog.kronis.dev/everything%20is%20broken/bitnami-mar... (in short, the official MariaDB image uses "/var/lib/mysql" and Bitnami MariaDB image uses "/bitnami/mariadb" for persistence; that tripped me up)

this is nice but it's not the one https://github.com/bitnami/containers/tree/main/bitnami but need to look at them more, thanks

postgres:15-bullseye 2bb008a38e7c 379MB

[1] https://github.com/bitnami/minideb

However, it is sometimes a good idea to benchmark the speed of different images, as sometimes a significant speed loss is possible.

as is stated initially, that goes back to how bitnami is building its Docker images, basing on a set of debian packages (minideb) - there's also a shell library/framework embedded that does useful things, but that makes you read more code when you go check how the sausage is made. That minideb is the basis for the higher CVE count compared to scratch or alpine images.

> it’s a well-kept secret that no one wants to talk about

the maintainer side most casual docker image users aren't aware of I'd rephrase, but bitnami at least documents the issue

https://github.com/bitnami/minideb#security

https://docs.bitnami.com/kubernetes/open-cve-policy/

Ah, yeah it's a little more confusing because it's using the debootstrap tool (https://wiki.debian.org/Debootstrap) to build the container image filesystem. You can see all the gory logic here: https://github.com/bitnami/minideb/blob/master/buildone and https://github.com/bitnami/minideb/blob/master/mkimage It's a bunch of shell scripting that's not really meant to be interpreted by anyone that isn't a debian expert though, so don't feel bad if it looks really confusing. I think the overall thing is that minideb installs the absolute bare minimum system with debootstrap and even strips out a few essential packages like trusted SSL CAs, etc. If you need anything (including those essential packages) you're meant to just install_packages install them--it's all using the same apt sources and packages as debian.

Do you know why this is? Because it's part of the base file system. Here is a line from the build script for minideb (basically the smallest image needed to run a container): https://github.com/bitnami/minideb/blob/e4f37e8a5d271d93b79c3f4caa49c4ceb95d8eec/mkimage#L52