←back to thread

The Deletion of Docker.io/Bitnami

(community.broadcom.com)
329 points zdkaster | 3 comments | 28 Aug 25 04:37 UTC | HN request time: 0.209s | source
Show context
notimetorelax ◴[28 Aug 25 05:07 UTC] No.45048589[source]▶
Is anyone working on mirroring the images and keeping them updated?
replies(3): >>45048778 #>>45048951 #>>45049063 #
1. runamok ◴[28 Aug 25 06:05 UTC] No.45048951[source]▶
In brief you need to switch the registry from (iirc) docker.io/bitnami to docker.io/bitnamilegacy. Note that as of iirc tomorrow those images will no longer be updated. So the moment there is a high or critical cve you better have a plan to use a new image and likely helm chart or send broadcom cash. The old registry will continue to have a "latest" tag but this should not be used for production.
replies(1): >>45048994 #
2. finaard ◴[28 Aug 25 06:13 UTC] No.45048994[source]▶
According to the article the current situation already is a bit of a clusterfuck:

The Photon images provide many other benefits not previously available to users of Debian images, including:

  - Drastically reduced CVE count (e.g., 100+ CVEs to in some cases 0)
replies(1): >>45057368 #
3. runamok ◴[28 Aug 25 21:41 UTC] No.45057368[source]▶
Sure. My company is demoing Chainguard which is quite pricy for hardened images. Bitnami premium reportedly goes for $50k to $72k per year: https://devoriales.com/post/402/from-free-to-fee-how-broadco...