On 2018-03-19, Fabian Vogt
opensuse/amd64:42.3 (or opensuse/amd64:leap) is what we would've suggested using earlier, but with this new setup I would hope that means we're going to push everything to opensuse/<flavor>:<version>.
My original plan was to have a single source for official images. Leap will be available only as part of the official library (so opensuse:15.0) whereas Tumbleweed only as opensuse/tumbleweed.
For Leap there's IMO no reason to move it from the official images, except the convoluted submission process, sending a pull request with a text file containing git repos and hashes...
The issue is actually larger than this. The official-library doesn't use the image we create in OBS directly. Rather it takes a tar of the rootfs and then applies them *inside* a Docker build. Because they (still!) use AUFS, this causes the rootfs to not be identical to the one we built (in particular this strips certain xattrs like "security.capability"). We discovered this when the official-library build broke when we fixed "security.capability" support in KIWI (they didn't notice the breakage during the PR process because they test PRs on non-AUFS Docker, but build it on AUFS Docker), and I had to write some Docker patches to "fix" it so that our images would be in official-library again (the build had been failing since). I would always recommend that people use the images we build in OBS, for the same reason we recommend people use packages built in OBS rather than packages built manually via rpmbuild(1) on a random machine in some stranger's basement. The obvious downside with only having "opensuse/..." images is that people won't know why "docker pull opensuse" doesn't work anymore. -- Aleksa Sarai Senior Software Engineer (Containers) SUSE Linux GmbH https://www.cyphar.com/