Skip to content

[DOCS] Make Wolfi hardened Docker option more prominent #118755

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 7 commits into from
Dec 18, 2024
Merged

[DOCS] Make Wolfi hardened Docker option more prominent #118755

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
f755dbf
[DOCS] Mention Wolfi hardened option in Docker docs
leemthompo Dec 16, 2024
e8c3daf
Make Wolfi info more prominent
leemthompo Dec 17, 2024
4453c2e
Add Wolfi docker image variable
leemthompo Dec 17, 2024
190da2e
Somebody already added that variable
leemthompo Dec 17, 2024
d10500d
Ditto
leemthompo Dec 17, 2024
871005c
Merge branch 'main' into docker-wolfi-docs
leemthompo Dec 17, 2024
f34538f
Ok this file was updated in meantime but tidying it up a bit anyway
leemthompo Dec 17, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions docs/reference/setup/install/docker.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,17 @@ docker pull {docker-image}
----
// REVIEWED[DEC.10.24]
--
+
[TIP]
====
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd break this out of a tip - feels like part of the primary narrative to me

since this adds security, is using wolfi images the better path? should we recommend it for everyone using an appropriate version of docker?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I agree with the tip point, but also I pulled main and discovered this file had already been updated. I tried to make guidance more prominent at the outset in any case;

I assume at some point in the future the container will stop needing to be explicitly called out as wolfi once it becomes default.

Alternatively, you can use the hardened https://wolfi.dev/[Wolfi] image for additional security.
Using Wolfi images requires Docker version 20.10.10 or higher.

[source,sh,subs="attributes"]
----
docker pull docker.elastic.co/elasticsearch/elasticsearch-wolfi:{version}
----
====

. Optional: Install
https://docs.sigstore.dev/cosign/system_config/installation/[Cosign] for your
Expand Down
Loading