arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge pull request #458 from jzelinskie/linux-vulns

Browse Source 
docs: add troubleshooting about kernel packages
This commit is contained in:
Jimmy Zelinskie 2017-08-31 04:38:03 -04:00 committed by GitHub
commit 6ad4aeab76
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
Documentation/running-clair.md
View File

@ -109,3 +109,8 @@ $ ./$GOPATH/bin/clair -config=config.yaml
During the first run, Clair will bootstrap its database with vulnerability data from the configured data sources.
It can take several minutes before the database has been fully populated, but once this data is stored in the database, subsequent updates will take far less time.
### I'm seeing Linux kernel vulnerabilities in my image, that doesn't make any sense since containers share the host kernel!
Many container base images using Linux distributions as a foundation will install dummy kernel packages that do nothing but satisfy their package manager's dependency requirements.
The Clair developers have taken the stance that Clair should not filter results, providing the most accurate data as possible to user interfaces that can then apply filters that make sense for their users.