Dockerfile: create "dependabot" user #3398

thepwagner · 2021-03-29T15:35:12Z

Previously, the root Dockerfile would run all instructions as the default user of the parent container (specifically: root). This leaves several paths where dynamic SDK versions might be installed (e.g. pyenv, rustup) owned by root.
In Dockerfile.development, and hopefully other downstream containers, we create a user grant that user ownership of these paths. Those ownership changes make for a very expensive docker layer.

This PR migrates the creation of the user account to the base Dockerfile, so that dependencies can be owned by the correct user in the layer they're initially added. This will reduce build times, and the size of final images.

The ability for bin/docker-dev-shell --rebuild to synchronize the dependabot UID/GID for consistency across volume mounts is retained, but now developers are expected to rebuild the dependabot/dependabot-core image locally (previously it could be pulled from the registry). The --rebuild flag already does this, so it shouldn't be any additional toil 🤞 .

I introduced a bin/cibuild script that chains the Dockerfile->Dockerfile.ci steps similar to Actions. This was helpful for this iteration - it could be adopted by .github/workflows/ci.yml or abandoned. I don't think we should start maintaining this flow in two places. We rolled that back for now.

Using that harness, I verified the CI script can be simplified by just bulk adding the source code in the Dockerfile.ci build. This avoids the scripting complexity (and for Macs: hefty performance penalty) of volume mounting all the individual directories. That script complexity is retained in bin/docker-dev-shell, because sharing with an external editor is worth it there. This avoids synchronizing the UID/GID with the host in CI, so the UID/GID of dependabot/dependabot-core is a reliable 1000:1000.

Dockerfile.development

Dockerfile

feelepxyz · 2021-03-30T08:33:58Z

Thanks for starting on this! I reckon this might end up speeding up updater image builds a fair bit and reduce the size 🙌 also means we can test core with the same permissions as the updater without running out of disk space in actions ✨

thepwagner

LGTM! I wondered about implications of OSTYPE

If it's necessary, should the later chowns use dependabot:$USER_GID instead of the dependabot:dependabot (e.g. the group by name)?

Dockerfile

Dockerfile.ci

Dockerfile

Dockerfile.development

xlgmokha

Is there any chance you could prepare a dive report or hook up dive in the cibuild script via this.

Dockerfile

thepwagner · 2021-04-08T12:07:21Z

a dive report
asdf

@xlgmokha I dig it! I've opened internal tracking issues for both of these improvements, I don't think they should slip into this PR's scope.

Dive reporting on dependabot-core would only half-solve the problem - we care most about the final image in production.

bin/cibuild

Dockerfile.ci

omnibus/script/ci-test

.github/workflows/ci.yml

feelepxyz · 2021-04-09T10:19:18Z

@thepwagner I think this is close to done now 🎉 could I get your 👀 on the native helper permission changes? I'm going to do a test on staging with all ecosystems and leave it until Monday before thinking about deploying.

thepwagner · 2021-04-09T15:14:47Z

could I get your 👀 on the native helper permission changes?

I'm concerned about the changes for rust permissions.

Referencing the chown workaround we're trying to replace, I think there are 3 important postconditions to test in the image:

If the update requires custom python, can it be installed? pyenv install 3.9.3
If the update downloads go modules, can they be installed? go get github.com/sirupsen/logrus
If the update requires a custom rust toolchain, can it be installed? rustup install 1.50.0

b35c591 passes the first 2, but can't install a custom rust version:

dependabot@6f91d58b997c:/opt/go/gopath$ rustup install 1.50.0
info: syncing channel updates for '1.50.0-x86_64-unknown-linux-gnu'
error: could not create temp file: /opt/rust/tmp/sqi0qzbcwhefp9b3_file

I didn't work step by step, but the final result also writes to /opt/rust/toolchains and /opt/rust/update-hashes:

dependabot@ce69f0013b03:/opt/rust$ find /opt/rust -maxdepth 3 -name "*1.50.0*"
/opt/rust/toolchains/1.50.0-x86_64-unknown-linux-gnu
/opt/rust/update-hashes/1.50.0-x86_64-unknown-linux-gnu

We could either chown those paths so the delegated user can write them, or use a USER dependabot directive to perform the entire install as the dependabot user.

feelepxyz · 2021-04-09T15:21:31Z

b35c591 passes the first 2, but can't install a custom rust version:

Oh good spot! I'm trying to find any references of installing custom rust versions from updates but can't find any but looks like we fetch a rust-toolchain file if present. https://rust-lang.github.io/rustup/overrides.html

feelepxyz · 2021-04-09T15:24:09Z

We might be able to test against this repo https://github.com/rust-lang/rust-clippy

Dockerfile

feelepxyz · 2021-04-09T16:38:42Z

Looks like rust updates with a custom toolchain are indeeed failing, tested on https://github.com/feelepxyz/rust-clippy and seeing: info: syncing channel updates for 'nightly-2021-04-08-x86_64-unknown-linux-gnu' updater | <job_109124542> error: could not create temp file: /opt/rust/tmp/ec6c4k1xq74aa07p_file

thepwagner · 2021-04-09T17:55:41Z

@xlgmokha now that we're ~stable, here's a (manual for now :/ ) dive report:

Pre, fc12b55 :

Image Source: docker://docker.io/dependabot/dependabot-core:fc12b554eaf835858e1cf9252da39bfc7243258f
Fetching image... (this can take a while for large images)
Analyzing image...
  efficiency: 98.7559 %
  wastedBytes: 93762386 bytes (94 MB)
  userWastedPercent: 2.1754 %
Inefficient Files:
Count  Wasted Space  File Path
    2        8.2 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4
    2        7.2 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4
    2        6.8 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4
    6        5.6 MB  /var/cache/debconf/templates.dat
    2        4.6 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4
    3        3.1 MB  /var/cache/debconf/templates.dat-old
    2        3.1 MB  /root/.npm/_cacache/content-v2/sha512/b7/61/15994ac668f42f5e7d0591bcbb5b6967f5b678f0a64d5a5144a4731786c17a0bee115f6fff2a93520c7a395b09347f7812145c1e0336051609a6c3a86716
    6        2.2 MB  /var/lib/dpkg/status
    6        2.2 MB  /var/log/dpkg.log
    5        2.2 MB  /var/lib/dpkg/status-old
    5        1.2 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease

Post, 86c2b45

Image Source: docker://dependabot/dependabot-core:86c2b45012053f4e8f23ee53c38f37474c3916e2
Fetching image... (this can take a while for large images)
Analyzing image...
  efficiency: 98.6085 %
  wastedBytes: 98797996 bytes (99 MB)
  userWastedPercent: 2.2888 %
Inefficient Files:
Count  Wasted Space  File Path
    3         12 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4
    3         11 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4
    2        6.8 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4
    6        5.6 MB  /var/cache/debconf/templates.dat
    2        4.6 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4
    3        3.1 MB  /var/cache/debconf/templates.dat-old
    6        2.2 MB  /var/lib/dpkg/status
    6        2.2 MB  /var/log/dpkg.log
    5        2.2 MB  /var/lib/dpkg/status-old
    5        1.2 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease
    2        590 kB  /usr/local/.pyenv/versions/2.7.18/lib/python2.7/site-packages/pip/_vendor/idna/uts46data.pyc

Pretty boring: no regressions - still some wins to be squeaked out with && rm /var/lib/apt/lists/* but that wasn't the intent.

The expected wins are in images derived from dependabot/dependabot-core, e.g. the Dockerfile.development from inside this repo:

Pre:

Image Source: docker://dependabot/dependabot-core-development:fc12b554eaf835858e1cf9252da39bfc7243258f
Fetching image... (this can take a while for large images)
Analyzing image...
  efficiency: 65.1342 %
  wastedBytes: 4670635698 bytes (4.7 GB)
  userWastedPercent: 67.5946 %
Inefficient Files:
Count  Wasted Space  File Path
    2        251 MB  /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/librustc_driver-7ea116e55de24565.so
    2        251 MB  /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/librustc_driver-7ea116e55de24565.so
    2        186 MB  /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/libLLVM-11-rust-1.51.0-stable.so
    2        186 MB  /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/libLLVM-11-rust-1.51.0-stable.so
    2        139 MB  /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-3aaf8f932781f33e.rlib
    2        139 MB  /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-3aaf8f932781f33e.rlib
    2         72 MB  /usr/local/.pyenv/versions/3.9.4/lib/python3.9/config-3.9-x86_64-linux-gnu/libpython3.9.a
    2         72 MB  /usr/local/.pyenv/versions/3.9.4/lib/libpython3.9.a
    3         48 MB  /home/dependabot/.bundle/cache/compact_index/rubygems.org.443.29b0360b937aa4d161703e6160654e47/versions
    2         44 MB  /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/bin/cargo
    2         44 MB  /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo

Post:

Image Source: docker://docker.io/dependabot/dependabot-core-development:86c2b45012053f4e8f23ee53c38f37474c3916e2
Fetching image... (this can take a while for large images)
Analyzing image...
  efficiency: 97.5930 %
  wastedBytes: 165345180 bytes (165 MB)
  userWastedPercent: 3.6150 %
Inefficient Files:
Count  Wasted Space  File Path
    4         64 MB  /home/dependabot/.bundle/cache/compact_index/rubygems.org.443.29b0360b937aa4d161703e6160654e47/versions
    3         12 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4
    3         11 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4
    2        6.8 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4
    7        6.6 MB  /var/cache/debconf/templates.dat
    2        4.6 MB  /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4
    3        3.1 MB  /var/cache/debconf/templates.dat-old
    7        2.8 MB  /var/lib/dpkg/status
    7        2.7 MB  /var/log/dpkg.log
    6        2.7 MB  /var/lib/dpkg/status-old
    5        1.2 MB  /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease

That's exactly the expected result: we've saved this super expensive layer 🏎️ 🎉 .

feelepxyz · 2021-04-09T18:21:53Z

Sweet!

…

On Fri, 9 Apr 2021 at 18:56, Pete Wagner ***@***.***> wrote: @xlgmokha <https://github.com/xlgmokha> now that we're ~stable, here's a (manual for now :/ ) dive report: Pre, fc12b55 <fc12b55> : Image Source: docker://docker.io/dependabot/dependabot-core:fc12b554eaf835858e1cf9252da39bfc7243258f Fetching image... (this can take a while for large images) Analyzing image... efficiency: 98.7559 % wastedBytes: 93762386 bytes (94 MB) userWastedPercent: 2.1754 % Inefficient Files: Count Wasted Space File Path 2 8.2 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4 2 7.2 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4 2 6.8 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4 6 5.6 MB /var/cache/debconf/templates.dat 2 4.6 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4 3 3.1 MB /var/cache/debconf/templates.dat-old 2 3.1 MB /root/.npm/_cacache/content-v2/sha512/b7/61/15994ac668f42f5e7d0591bcbb5b6967f5b678f0a64d5a5144a4731786c17a0bee115f6fff2a93520c7a395b09347f7812145c1e0336051609a6c3a86716 6 2.2 MB /var/lib/dpkg/status 6 2.2 MB /var/log/dpkg.log 5 2.2 MB /var/lib/dpkg/status-old 5 1.2 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease Post, 86c2b45 <86c2b45> Image Source: docker://dependabot/dependabot-core:86c2b45012053f4e8f23ee53c38f37474c3916e2 Fetching image... (this can take a while for large images) Analyzing image... efficiency: 98.6085 % wastedBytes: 98797996 bytes (99 MB) userWastedPercent: 2.2888 % Inefficient Files: Count Wasted Space File Path 3 12 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4 3 11 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4 2 6.8 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4 6 5.6 MB /var/cache/debconf/templates.dat 2 4.6 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4 3 3.1 MB /var/cache/debconf/templates.dat-old 6 2.2 MB /var/lib/dpkg/status 6 2.2 MB /var/log/dpkg.log 5 2.2 MB /var/lib/dpkg/status-old 5 1.2 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease 2 590 kB /usr/local/.pyenv/versions/2.7.18/lib/python2.7/site-packages/pip/_vendor/idna/uts46data.pyc Pretty boring: no regressions - still some wins to be squeaked out with && rm /var/lib/apt/lists/* but that wasn't the intent. ------------------------------ The expected wins are in images derived from dependabot/dependabot-core, e.g. the Dockerfile.development from inside this repo: Pre: Image Source: docker://dependabot/dependabot-core-development:fc12b554eaf835858e1cf9252da39bfc7243258f Fetching image... (this can take a while for large images) Analyzing image... efficiency: 65.1342 % wastedBytes: 4670635698 bytes (4.7 GB) userWastedPercent: 67.5946 % Inefficient Files: Count Wasted Space File Path 2 251 MB /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/librustc_driver-7ea116e55de24565.so 2 251 MB /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/librustc_driver-7ea116e55de24565.so 2 186 MB /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/libLLVM-11-rust-1.51.0-stable.so 2 186 MB /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/libLLVM-11-rust-1.51.0-stable.so 2 139 MB /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-3aaf8f932781f33e.rlib 2 139 MB /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-3aaf8f932781f33e.rlib 2 72 MB /usr/local/.pyenv/versions/3.9.4/lib/python3.9/config-3.9-x86_64-linux-gnu/libpython3.9.a 2 72 MB /usr/local/.pyenv/versions/3.9.4/lib/libpython3.9.a 3 48 MB /home/dependabot/.bundle/cache/compact_index/rubygems.org.443.29b0360b937aa4d161703e6160654e47/versions 2 44 MB /opt/rust/toolchains/1.51.0-x86_64-unknown-linux-gnu/bin/cargo 2 44 MB /opt/rust/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo Post: Image Source: docker://docker.io/dependabot/dependabot-core-development:86c2b45012053f4e8f23ee53c38f37474c3916e2 Fetching image... (this can take a while for large images) Analyzing image... efficiency: 97.5930 % wastedBytes: 165345180 bytes (165 MB) userWastedPercent: 3.6150 % Inefficient Files: Count Wasted Space File Path 4 64 MB /home/dependabot/.bundle/cache/compact_index/rubygems.org.443.29b0360b937aa4d161703e6160654e47/versions 3 12 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_main_binary-amd64_Packages.lz4 3 11 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic-updates_universe_binary-amd64_Packages.lz4 2 6.8 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_main_binary-amd64_Packages.lz4 7 6.6 MB /var/cache/debconf/templates.dat 2 4.6 MB /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_bionic-security_universe_binary-amd64_Packages.lz4 3 3.1 MB /var/cache/debconf/templates.dat-old 7 2.8 MB /var/lib/dpkg/status 7 2.7 MB /var/log/dpkg.log 6 2.7 MB /var/lib/dpkg/status-old 5 1.2 MB /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_bionic_InRelease That's exactly the expected result: we've saved this super expensive layer <https://github.com/dependabot/dependabot-core/blob/fc12b554eaf835858e1cf9252da39bfc7243258f/Dockerfile.development#L21-L24> 🏎️ 🎉 . — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#3398 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAE5RLFGKFKCGNDJAYI3NLTH45TBANCNFSM4Z72H2WQ> .

feelepxyz · 2021-04-12T10:09:59Z

Rust updates with custom toolchains are working now 🎉 feelepxyz/rust-clippy#1

feelepxyz

I've tested all ecosystems on staging are working, including installing custom rust toolchains and ruby git vendoring 🎉

Previously the `Dockerfile` would install dependencies as the root user, then a subsequent `Dockerfile` would create and delegate to a `dependabot` user. Chowning files in a downstream layer is expensive and slow! Let's encourage the best practice of non-root containers by creating `dependabot` directly in the `Dockerfile`. Co-authored-by: Pete Wagner <thepwagner@github.com>

thepwagner · 2021-04-12T13:19:20Z

feelepxyz requested a review from hmarr 3 hours ago

Per this, I'm considering this blocked in @hmarr 's review.

hmarr

@feelepxyz and I chatted about this separately, I'm 👍 on the change.

thepwagner self-assigned this Mar 29, 2021

feelepxyz reviewed Mar 30, 2021

View reviewed changes

Dockerfile.development Outdated Show resolved Hide resolved

feelepxyz reviewed Mar 30, 2021

View reviewed changes

Dockerfile Outdated Show resolved Hide resolved

feelepxyz mentioned this pull request Mar 30, 2021

Reverts #3320 bringing back the changes from #3279 #3323

Closed

feelepxyz marked this pull request as ready for review April 6, 2021 17:16

feelepxyz requested a review from a team as a code owner April 6, 2021 17:16

feelepxyz marked this pull request as draft April 6, 2021 17:16

feelepxyz marked this pull request as ready for review April 7, 2021 12:03

thepwagner commented Apr 7, 2021

View reviewed changes

Dockerfile Outdated Show resolved Hide resolved

Dockerfile Outdated Show resolved Hide resolved

Dockerfile.ci Outdated Show resolved Hide resolved

Dockerfile Outdated Show resolved Hide resolved

feelepxyz reviewed Apr 7, 2021

View reviewed changes

Dockerfile Show resolved Hide resolved

thepwagner commented Apr 7, 2021

View reviewed changes

Dockerfile Show resolved Hide resolved

thepwagner commented Apr 7, 2021

View reviewed changes

Dockerfile.development Outdated Show resolved Hide resolved

xlgmokha approved these changes Apr 7, 2021

View reviewed changes

Dockerfile Show resolved Hide resolved

Dockerfile Show resolved Hide resolved

feelepxyz reviewed Apr 8, 2021

View reviewed changes

bin/cibuild Outdated Show resolved Hide resolved

feelepxyz reviewed Apr 8, 2021

View reviewed changes

Dockerfile.ci Show resolved Hide resolved

feelepxyz reviewed Apr 9, 2021

View reviewed changes

omnibus/script/ci-test Show resolved Hide resolved

feelepxyz reviewed Apr 9, 2021

View reviewed changes

.github/workflows/ci.yml Show resolved Hide resolved

feelepxyz mentioned this pull request Apr 9, 2021

Feelepxyz/dockerfile user #3468

Closed

feelepxyz reviewed Apr 9, 2021

View reviewed changes

Dockerfile Show resolved Hide resolved

feelepxyz requested a review from hmarr April 12, 2021 10:10

feelepxyz approved these changes Apr 12, 2021

View reviewed changes

feelepxyz force-pushed the dockerfile-user branch from 3340022 to 89e6f47 Compare April 12, 2021 11:54

jurre mentioned this pull request Apr 12, 2021

Docker image is huge #946

Closed

4 tasks

thepwagner added the blocked 🚫 label Apr 12, 2021

hmarr approved these changes Apr 12, 2021

View reviewed changes

thepwagner removed the blocked 🚫 label Apr 12, 2021

thepwagner merged commit 5fac681 into main Apr 12, 2021

thepwagner deleted the dockerfile-user branch April 12, 2021 19:58

This was referenced Apr 12, 2021

v0.141.0 #3481

Merged

Cache composer installs & install ca-certificates #3485

Merged

baseballlover723 mentioned this pull request Apr 15, 2021

set Dockerfile WORKDIR to /home/dependabot to avoid permission errors when consumers of the dependabot-core image run bundle install #3495

Merged

feelepxyz mentioned this pull request Apr 15, 2021

GitLab script fails with Errno::EACCES: Permission denied @ rb_sysopen - dependabot/dependabot-script#574

Closed

thepwagner mentioned this pull request Jun 21, 2021

bin/ci-test #3959

Merged

jakecoffman mentioned this pull request Feb 7, 2023

fixes docker-dev-shell not using the cache due to wrong tag #6614

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dockerfile: create "dependabot" user #3398

Dockerfile: create "dependabot" user #3398

thepwagner commented Mar 29, 2021 •

edited

Loading

feelepxyz commented Mar 30, 2021

thepwagner left a comment

xlgmokha left a comment •

edited

Loading

thepwagner commented Apr 8, 2021

feelepxyz commented Apr 9, 2021

thepwagner commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

thepwagner commented Apr 9, 2021

feelepxyz commented Apr 9, 2021 via email

feelepxyz commented Apr 12, 2021

feelepxyz left a comment

thepwagner commented Apr 12, 2021

hmarr left a comment

Dockerfile: create "dependabot" user #3398

Dockerfile: create "dependabot" user #3398

Conversation

thepwagner commented Mar 29, 2021 • edited Loading

feelepxyz commented Mar 30, 2021

thepwagner left a comment

Choose a reason for hiding this comment

xlgmokha left a comment • edited Loading

Choose a reason for hiding this comment

thepwagner commented Apr 8, 2021

feelepxyz commented Apr 9, 2021

thepwagner commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

feelepxyz commented Apr 9, 2021

thepwagner commented Apr 9, 2021

feelepxyz commented Apr 9, 2021 via email

feelepxyz commented Apr 12, 2021

feelepxyz left a comment

Choose a reason for hiding this comment

thepwagner commented Apr 12, 2021

hmarr left a comment

Choose a reason for hiding this comment

thepwagner commented Mar 29, 2021 •

edited

Loading

xlgmokha left a comment •

edited

Loading