You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
chore!: Remove wget from Promtail docker image (#15101)
The package has been added to the Docker image with PR #11711 with the intention to support the Docker healthcheck.
However, to reduce the attack surface of our Docker images, we want to keep them as slim as possible. The current version of Promtail (3.3.0) for example contains a wget version with vulnerability [CVE-2024-38428](https://security-tracker.debian.org/tracker/CVE-2024-38428).
The healthcheck can be achieved by other means, e.g.
1. Extend the `grafana/promtail` base image and add `wget` using `apt install wget`
#11590 (comment)
3. Use low-level `/dev/tcp/127.0.0.1:9080` to establish a connection and check the exit code
#11590 (comment)
Original discussion about adding wget #11590
This may break someone's Docker compose installation, when they require on the `wget` powered health check.
Signed-off-by: Christian Haudum <christian.haudum@gmail.com>
0 commit comments