Comment on My Homelab Got Hacked - A Postmortem – Phunky Cafe
antianarchist@sopuli.xyz 1 week ago
I hate providers not offering me a latest tag. Is there any valid reason not to do that?
Even worse, super stupid version tags such as MinIO is using: RELEASE.2025-09-07T16-13-09Z-cpuv1 (I wish I made that up)
ShortN0te@lemmy.ml 1 week ago
My guess, auto updates for major versions is not good practice. Installations potentially corrupt and users come screaming to the project maintainers instead of searching the blame by themselfe.
forgejo defined the lifecycle for every version so just add a calendar entry for when the supports runs out and then update the 3 characters in the docker compose file.
antianarchist@sopuli.xyz 1 week ago
I can get that and I also prefer sticking to major versions. However, I am chaotic and easily have 50 different docker images, checking all the release cycle of all of those gets exhausting.
I believe I need to start generating notifications if a tag has not received an update for more than 30d.