Open
Description
I don't think we should recommend docker commit
and docker push
as the way to 'publish' a Dockerfile. This results in just a binary image blob being uploaded to the hub, which is not particularly transparent; a user really has no way of knowing / trusting that the image contains what it says.
I think it would be better to simply put the Dockerfile on Github and link it as an automated build. (In this case, users should probably use one of the version-specific tags instead of :latest
in their FROM
line to ensure long-term reproducibility / stability of the build).
Metadata
Metadata
Assignees
Labels
No labels