Skip to content

Add source code to our images #1069

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dervoeti opened this issue Apr 29, 2025 · 3 comments · Fixed by #1126
Closed

Add source code to our images #1069

dervoeti opened this issue Apr 29, 2025 · 3 comments · Fixed by #1126
Assignees

Comments

@dervoeti
Copy link
Member

Distribute the exact source code (including custom patches!) that was used to build the product in the final images. Also include source code for non-products components if possible (kcat, Phoenix, nifi-opa-authorizer, ...).

@dervoeti dervoeti self-assigned this Apr 29, 2025
@dervoeti dervoeti moved this to Development: In Progress in Stackable Engineering May 20, 2025
@dervoeti dervoeti moved this from Development: In Progress to Development: Waiting for Review in Stackable Engineering May 23, 2025
@maltesander maltesander moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering May 26, 2025
@maltesander maltesander moved this from Development: In Review to Development: Done in Stackable Engineering May 27, 2025
@lfrancke lfrancke moved this from Development: Done to Acceptance: In Progress in Stackable Engineering May 28, 2025
@lfrancke
Copy link
Member

This is something that we should document in my opinion. I don't know where to be honest though. Somewhere in the vicinity of the SBOM docs maybe?
And I'd like to have release notes as well please.

I think this is fantastic and we should write about it.

@dervoeti
Copy link
Member Author

Regarding documentation:
Yeah it's worth mentioning, but I'm also not sure where. I could add a sentence or two here:
https://docs.stackable.tech/home/stable/guides/viewing-and-verifying-sboms/
Or maybe here:
https://docs.stackable.tech/home/stable/product-information/

Created a draft PR for this.

Release note

We've added source code snapshots directly into our container images to further improve transparency and the debugging experience. Each container image now includes .tar.gz archives containing the exact source code used to build that specific version of the product. They can be found within the /stackable directory of each container image.

@dervoeti
Copy link
Member Author

By the way: Should we do this for our operators as well? Would be more consistent. On the other hand: We don't apply custom patches there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Acceptance: In Progress
Development

Successfully merging a pull request may close this issue.

2 participants