Request for tagged Images

[erkules]

Not sure if this is the right place.
Right now there is always a :latest image on docker hub.
Would be great to have a tagged version and not only the latest.
So having a history of tags. would simplify deploying openunison.

thx

[mlbiam]

Thanks @erkules for reaching out. If you want specifically tagged images, we recommend that you import our images into a local registry instead of pulling directly from Dockerhub.

The reason we only publish a latest image is to make it easier to maintain our patching process (https://www.tremolosecurity.com/post/our-commitment-to-patching). All of our published containers are updated whenever Ubuntu publishes a fix for a CVE. This usually happens twice a month and you can track when this happens by looking at the patchlog.txt in our repositories. Since we release fairly often (I think we've had 3 releases in 2022 to address customer needs) having an open source "LTE" would be difficult and we've found over the years that its exceedingly rare we introduce a breaking change without catching it in our automated testing.

What we don't want to happen is to either publish an old container with known vulnerabilities or be in a situation where "unpublishing" a container leads to clusters becoming un-accessible because they can't pull an image.