Commits on Nov 27, 2024

1. chore!: Remove wget from Promtail docker image (#15101) …

   The package has been added to the Docker image with PR #11711 with the intention to support the Docker healthcheck.
   
   However, to reduce the attack surface of our Docker images, we want to keep them as slim as possible. The current version of Promtail (3.3.0) for example contains a wget version with vulnerability [CVE-2024-38428](https://security-tracker.debian.org/tracker/CVE-2024-38428).
   
   The healthcheck can be achieved by other means, e.g.
   
   1. Extend the `grafana/promtail` base image and add `wget` using `apt install wget`
      #11590 (comment)
   3. Use low-level `/dev/tcp/127.0.0.1:9080` to establish a connection and check the exit code
      #11590 (comment)
   
   Original discussion about adding wget #11590
   This may break someone's Docker compose installation, when they require on the `wget` powered health check.
   
   Signed-off-by: Christian Haudum <[email protected]>
   (cherry picked from commit 2eea546)

   

   chaudum authored and grafana-delivery-bot[bot] committed Nov 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 781397f
   • Browse repository at this point

   Copy the full SHA

   781397f View commit details

   Browse the repository at this point in the history