Backend Dockerfile using Alpine
See original GitHub issue
We’re using Backstage in an enterprise environment where Twistlock is used to assess the security of containers. Official Node.js Docker images are notorious for reporting many security vulnerabilities. For this reason, our organization uses Alpine as a base for the majority of containers which have much fewer vulnerability reports in the base operating system.
Scaffolder uses Alpine already, but the base container created with @backstage/create-app is using Ubuntu Buster.
Feature Suggestion
Either provide an alternative to Ubuntu that uses Alpine or replace Ubuntu with Alpine base image.
Possible Implementation
I tried to do this myself several times but I kept getting segfault errors. I believe the Backstage core team is aware of this.
Issue Analytics
- State:
 - Created 3 years ago
 - Reactions:3
 - Comments:5 (4 by maintainers)
 
Top Results From Across the Web
How to Use the Alpine Docker Official Image
You'll have to first pull the Alpine Docker Official Image before using it for your project. The fastest method involves running docker pull ......
Read more >Use Docker and Alpine Linux to build lightweight containers
A lightweight OS can save IT teams resources and cut costs. In this Docker and Alpine Linux tutorial, learn how to create a...
Read more >Creating an Alpine Docker Container - GeeksforGeeks
Step 1: Pull and Run the Alpine Image ... To run the Alpine Image Docker Container, you can use the Docker run command....
Read more >Add a User in Alpine Docker Image | Baeldung on Linux
Here, we create the user account baeldung with the adduser command. Moreover, by using the -D option, the user is created without a...
Read more >21 Best Practises in 2021 for Dockerfile | by Chris Ed Rego
An alternative to the above solution in the case of alpine is to use –no-cache which ensures that no cache is stored for...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

@Rugvip informed me that some native dependencies changed in a recent version of Backstage. I’m going to try upgrading to the latest version and report back.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.