Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove OpenSSL from alpine-slim images #942

Open
ferferga opened this issue Nov 20, 2024 · 2 comments
Open

Remove OpenSSL from alpine-slim images #942

ferferga opened this issue Nov 20, 2024 · 2 comments

Comments

@ferferga
Copy link

Is your feature request related to a problem? Please describe

I use this image for shipping a frontend application that just needs file serving. SSL handling is done with another reverse proxy, so the extra weight (4 MB+ uncompressed, which is quite noticeable) by OpenSSL is wasteful and could be improved

Describe the solution you'd like

As stated in the docs, the alpine slim images are intended for the most basic cases (like mine). For those tags, nginx should be built without SSL support, leaving the normal images for users who desire that.

Describe alternatives you've considered

  • Remove openssl using apk
  • Remove the linked libraries manually in a build step, but nginx has a hard requirement on them.
  • Patching the binary with patchelf, but it doesn't start even when forcing ssl off in the main http block.
@oxpa
Copy link
Collaborator

oxpa commented Nov 20, 2024

@ferferga have you considered building your own image? Given that the Dockefile and all sources are available - it's not a big deal.
SSL is an important feature which is definitely needed even in a slim image.

@thresheek
Copy link
Collaborator

Agreed, SSL support is something we will not remove from the images.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants