How can one access the docker base image in a github release manner?

[JoshuaBehrens]

In the README one can see this line

FROM ghcr.io/shopware/docker-base:8.2-nginx as base-image

This image seems to have been changed by removing /usr/local/shopware/setup_6.6.x
This should not be an issue as this change has been released in 0.3.0 but there seems no obvious way to downgrade to 0.2.0 build.

How can I ensure that, so I do not have to pin the image to an unreadable hash?

[shyim]

The tags are only there for composer recipes. They don't do anything. You should use the hash

[shyim]

When you use the hash, you should set for your own an https://github.com/aquasecurity/trivy scan, so you know when to update the sha because of security updates

[shyim]

Can this be closed then 🤔

[JoshuaBehrens]

@shyim it is a solution but I am not happy about it as some base-image upgrades were breaking already. Even when trivy finds an update it will contain more than just a bugfix but also breaking changes. So not easy to upgrade easily.

[shyim]

I don't know, to be honest, if you want to do proper image tagging by caddy/nginx + PHP version + break tagging.
I also don't think that we gonna change anything here anymore, this change with the setup script was deprecated for several months we even added a ugly sleep so people should notice it

[JoshuaBehrens]

Wait. This is now deprecated to use? This could've been better than an ugly sleep. Some just accept slow CI/CD as long as it works

[shyim]

We initially had this setup script, which did some bash wufuu to install or update Shopware. As we are aiming to unify setups across setups, we created deployment helper in PHP to make this portable in any environment. Therefore we deprecated that script last year summer and removed it January. Since then, the setup script checks if the deployment helper is installed and invokes it; it throws an error install please deployment helper.

[JoshuaBehrens]

Ah ok that part. Got it. I thought this docker base image was deprecated already. Got you

[shyim]

randomly saw, https://github.com/pimcore/docker#versioning we could adopt that too..