Debian based Distroless, UBI 8 based build, native-image troubles might ensue

Describe the bug

As I added a distroless setup to AWT graphics Quickstart: https://github.com/quarkusio/quarkus-quickstarts/pull/961 (depends on #20850), it struck me as odd that all quickstarts, including those potentially sensitive to native libs such as Tika, use quay.io/quarkus/quarkus-distroless-image:1.0 (yaml) as their base, which is in fact Debian based.

Quarkus native executable is thus built using UBI 8 based builder image and then copied into Debian userland, with Debian libz copied over, hoping for the best, see (yaml).

I used ubi-micro for the AWT quickstart distroless, manually copying necessary libraries from ubi-minimal, which is somewhat frail, although better off than if I attempted to use Debian libs to satisfy UBI dependencies…

I find such setup fragile. It seems to me that if we aim for truly minimalistic setup, we should be working with ubi-micro.

[matthyx]

Ubi Micro is really big to compete against the current setup. We need to have images around 50Mb, even less, Ubi micro exceeds 100Mb alone if I’m not mistaken.

That’s not my observation. Seems to be 13 MB compressed (UBI 8 micro) and ~39MB on disk. https://hub.docker.com/r/redhat/ubi8-micro/tags

$ podman images | grep ubi8-micro
docker.io/redhat/ubi8-micro                                                     latest      c5ba898d3645  2 months ago   38.9 MB

yes, I think @cescoffier was referring to ubi-minimal, but the equivalent of distroless is ubi-micro

[matthyx]

Good point @Karm it’s true that libraries aren’t 1:1 equivalent. I can take the point and migrate to ubi-micro… if someone can assign me?