docker images inherit labels from ubuntu that are wrong #216

Open
opened 2026-11-07 03:37:21 +01:00 by sneak · 4 comments
Owner
org.opencontainers.image.created 	2026-09-27T10:25:52.887617+00:00
org.opencontainers.image.description 	The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
org.opencontainers.image.title 	ubuntu
org.opencontainers.image.version 	26.04
``` org.opencontainers.image.created 2026-09-27T10:25:52.887617+00:00 org.opencontainers.image.description The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide. org.opencontainers.image.title ubuntu org.opencontainers.image.version 26.04 ```
Collaborator

Picked up for smallwebwaf's manager. The image sets its own OCI labels, so nothing inherited from the Ubuntu base image is left wrong or stale: title, description, version, created, source and revision for smallwebwaf. It starts at the next manager run.

Model: opus-5-5

Picked up for smallwebwaf's manager. The image sets its own OCI labels, so nothing inherited from the Ubuntu base image is left wrong or stale: title, description, version, created, source and revision for smallwebwaf. It starts at the next manager run. Model: opus-5-5
clawbot self-assigned this 2026-11-07 04:07:18 +01:00
Author
Owner

fix this now with opus. small change, shouldn’t need a review, let CI handle testing, no need to build it yourself. i’ll merge, not you

fix this now with opus. small change, shouldn’t need a review, let CI handle testing, no need to build it yourself. i’ll merge, not you
Collaborator

For the worker (an Opus run, by sneak's order #216 (comment)):

  • Every image this repo builds sets its own OCI labels, so none of Ubuntu's is left. Set at least the four in the issue (org.opencontainers.image.title, .description, .version and .created), plus .source and .revision, each describing that image under the repo's current names.
  • A value known only at build time (version, created, revision) comes from a build argument. Give each argument a default, so Ubuntu's value is replaced even when nothing is passed. If the CI workflow builds the images, pass the arguments there.
  • By sneak's order there is no review, and you don't build or test locally: CI tests it.
  • Push one PR into next that closes this issue, label it merge-ready and assign it to sneak. Don't merge it; he does.

Model: opus-5-5

**For the worker** (an Opus run, by sneak's order https://git.eeqj.de/sneak/smallwebwaf/issues/216#issuecomment-170437): - Every image this repo builds sets its own OCI labels, so none of Ubuntu's is left. Set at least the four in the issue (`org.opencontainers.image.title`, `.description`, `.version` and `.created`), plus `.source` and `.revision`, each describing that image under the repo's current names. - A value known only at build time (`version`, `created`, `revision`) comes from a build argument. Give each argument a default, so Ubuntu's value is replaced even when nothing is passed. If the CI workflow builds the images, pass the arguments there. - By sneak's order there is no review, and you don't build or test locally: CI tests it. - Push one PR into `next` that closes this issue, label it `merge-ready` and assign it to sneak. Don't merge it; he does. Model: opus-5-5
Collaborator

The PR is open at #224, into next. The image now sets its own OCI labels: title, description, version, created, revision and source. The scripts pass the build-time values. The example app sets its own title and description. It is labelled merge-ready and assigned to sneak, for him to merge.

Model: opus-5-5

The PR is open at https://git.eeqj.de/sneak/smallwebwaf/pulls/224, into `next`. The image now sets its own OCI labels: `title`, `description`, `version`, `created`, `revision` and `source`. The scripts pass the build-time values. The example app sets its own title and description. It is labelled `merge-ready` and assigned to sneak, for him to merge. Model: opus-5-5
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/smallwebwaf#216