{"action":"opened","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70249","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70249/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70249/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/70249/events","html_url":"https://github.com/kubernetes/kubernetes/issues/70249","id":374082465,"node_id":"MDU6SXNzdWUzNzQwODI0NjU=","number":70249,"title":"Create or decide on a base docker image for static go binaries","user":{"login":"tallclair","id":29742491,"node_id":"MDQ6VXNlcjI5NzQyNDkx","avatar_url":"https://avatars1.githubusercontent.com/u/29742491?v=4","gravatar_id":"","url":"https://api.github.com/users/tallclair","html_url":"https://github.com/tallclair","followers_url":"https://api.github.com/users/tallclair/followers","following_url":"https://api.github.com/users/tallclair/following{/other_user}","gists_url":"https://api.github.com/users/tallclair/gists{/gist_id}","starred_url":"https://api.github.com/users/tallclair/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tallclair/subscriptions","organizations_url":"https://api.github.com/users/tallclair/orgs","repos_url":"https://api.github.com/users/tallclair/repos","events_url":"https://api.github.com/users/tallclair/events{/privacy}","received_events_url":"https://api.github.com/users/tallclair/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-10-25T18:49:49Z","updated_at":"2018-10-25T18:49:49Z","closed_at":null,"author_association":"MEMBER","body":"Forked from https://github.com/kubernetes/kubernetes/issues/40248 (think of this as V2).\r\n\r\n`scratch` is not quite sufficient as a base image for static go binaries. Common dependencies include ca-certificates, resolv.conf, hosts, and nsswtich (see https://github.com/kubernetes/kubernetes/issues/69195).  See below for a more complete list.\r\n\r\nWe need to decide if we want a scratch+config base image (either found or created by us), or a more complete distro (e.g. debian-base, at the cost of more frequent patching). `gcr.io/distroless/base` has also been proposed, or could provide inspiration for a static base.\r\n\r\n**Blocked by:** (for the scratch case) https://github.com/kubernetes/kubernetes/issues/61006, for logs redirection.\r\n\r\n/kind bug\r\n/cc @ixdy \r\n\r\n---\r\n\r\n**Appendix**\r\n\r\nHere is a list of `/etc/*` files referenced from the go source (obviously some of these are not applicable):\r\n```\r\n$ grep -rEoIh '/etc/[-a-zA-Z./_]+[a-zA-Z]' | sort -u\r\n/etc/alpine-release\r\n/etc/apache\r\n/etc/apache/mime.types\r\n/etc/certs/ca-certificates.crt\r\n/etc/group\r\n/etc/hosts\r\n/etc/localtime\r\n/etc/mdns.allow\r\n/etc/mime.types\r\n/etc/nsswitch.conf\r\n/etc/openssl/certs\r\n/etc/openssl/certs/ca-certificates.crt\r\n/etc/passwd\r\n/etc/passwd/foo\r\n/etc/passwx\r\n/etc/paths.d/go\r\n/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\r\n/etc/pki/tls/cacert.pem\r\n/etc/pki/tls/certs\r\n/etc/pki/tls/certs/ca-bundle.crt\r\n/etc/profile\r\n/etc/protocols\r\n/etc/release\r\n/etc/resolv.conf\r\n/etc/security/cacerts\r\n/etc/services\r\n/etc/ssl/ca-bundle.pem\r\n/etc/ssl/cacert.pem\r\n/etc/ssl/cert.pem\r\n/etc/ssl/certs\r\n/etc/ssl/certs/ca-certificates.crt\r\n```"}}
{"actor":{"display_login":"tallclair"}}