Outdated PureFTP docker image

[kelson42]

Not updated since 6 years https://hub.docker.com/r/gimoh/pureftpd

Unfortuantely I don't have found any "official" Docker image to replace it.

[kelson42]

Reusing https://github.com/InAnimaTe/docker-vsftpd-anon seems a good candidate

[kelson42]

@rgaudin Had a look, and seems we will need anyway to keep our own Dockerfile. I don’t have found a good image ready to go.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be now be reviewed manually. Thank you for your contributions.

[kelson42]

We could maybe replace with https://hub.docker.com/r/corpusops/pureftpd

@benoit74 @rgaudin Would that be straight to replace in k8s?

[benoit74]

Is there any reason why we would use an image with pureftpd build from source vs official apt package?

My natural suggestion would be to build our own pureftpd image based on debian + official pureftpd apt package, since we do not need cutting edge functionalities or specific options AFAIK, but I'm a newbie on our usage of pureftpd

The image you suggested is good, but still not updated for 6 months and based on a custom base image derived from Ubuntu with a custom pureftpd compilation. Not really something I feel confident to use.

But yes, using the new image is straightforward in k8s (either the one you found or a simple new one as suggested)

[kelson42]

Is there any reason why we would use an image with pureftpd build from source vs official apt package?

Not really... beside lazyness I guesd ;)

My natural suggestion would be to build our own pureftpd image based on debian + official pureftpd apt package, since we do not need cutting edge functionalities or specific options AFAIK, but I'm a newbie on our usage of pureftpd

The image you suggested is good, but still not updated for 6 months and based on a custom base image derived from Ubuntu with a custom pureftpd compilation. Not really something I feel confident to use.

LGTM

But yes, using the new image is straightforward in k8s (either the one you found or a simple new one as suggested)

Considering the security concern the very old image image creates. Good to fix soon IMHO.

[rgaudin]

I've reviewed the changelog and I believe there would be no issue. I also support a custom debian:bookworm-slim image with the apt package.

FYI, pure-ftpd is used for anonymous FTP download from the server. It mounts the Kiwix downloads volume read-only.

[kelson42]

@benoit74 @rgaudin If we all agree on this new image, could you please deploy it?