handle dockerfile and helm Chart.yml package containers about cavil HOT 8 CLOSED

Yes, that would be nice to support natively.

from cavil.

This will become a problem if we start creating containers with Dockerfile for SLE / LEO

from cavil.

A few links to (reasonably diverse) samples would be very helpful to estimate the effort required to implement it.

from cavil.

Most images are in openSUSE:Factory and are called -image or -container. Here's a list of all currently successfully building Dockerfile images in oS:F: https://build.opensuse.org/project/monitor/openSUSE:Factory?defaults=0&succeeded=1&arch_i586=1&&arch_x86_64=1&repo_containerfile=1

From a content point of view, there's no real difference to kiwi builds.

The included license statements and license files are solely for the content provided by the image description (including tarballs), but not any of the packages it installs during build or the base layers. Currently there is only a standard to express the license of the container as a whole (the org.opencontainers.image.licenses annotation).

from cavil.

The devel:kubic:containers project contains lots of samples for Docker and Kiwi. Helm charts are more of a problem, since they don't have license metadata fields yet, just a bundled LICENSE file.

from cavil.

since they don't have license metadata fields yet, just a bundled LICENSE file.

Neither do Dockerfiles. For KIWI descriptions it's currently optional and most don't specify it.

from cavil.

since they don't have license metadata fields yet, just a bundled LICENSE file.

Neither do Dockerfiles. For KIWI descriptions it's currently optional and most don't specify it.

True, the convention to use # SPDX-License-Identifier: BSD-3-Clause comments does exist though. Even if in practice it is mostly missing.

from cavil.

The feature has been added. Cavil can now handle *.Dockerfile, *.kiwi and Chart.yaml. Since Helm charts don't have a convention for including an SPDX expression, we also scan for # SPDX-License-Identifier: ... comments there.

from cavil.