Hacker News Reader

Yes this is probably the problem, and I think the maintainers do everything they can.

I was not writing the post to criticise Alpine as I really like it, but people need to take the missing security updates into consideration before they start to depend on Alpine for important things.

View on HN

> I was not writing the post to criticise Alpine as I really like it, but people need to take the missing security updates into consideration before they start to depend on Alpine for important things.

I tried Alpine Linux and was very impressed, but have always resisted using it for container images because they do not publish CVEs or seem to have much process around security.

Arch is another good option to consider that receives frequent updates. However, Alpine package contribution isn't that challenging; but I'd like to see more CI integrations to automate the heck out of package updates.

I often look at the wiki pages for Arch as they are really good, but I will not use systemd so Arch is not for me.

Switching Arch over to OpenRC isn't overly difficult. [0] (A package and a kernel parameter).

Or there's the fork [1] where that is the default.

[0] https://wiki.archlinux.org/index.php/OpenRC

[1] https://artixlinux.org/faq.php

In addition to the others mentioned, I shall mention Thomas Caravia's Archnosh.

* http://repo.or.cz/archnosh.git

Reply on news.ycombinator.com