feat(library) -> Add nginx 1.31 - #280
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a new Unikraft library image definition for unikraft.org/nginx:1.31, intended to provide an updated Nginx base (Alpine-based) and address the CVE mentioned in the PR description.
Changes:
- Introduces a new
library/nginx/1.31image definition (Kraftfile + scratch rootfs Dockerfile). - Adds a custom Nginx configuration (single-process, tokens off, gzip, basic security headers).
- Adds the default Nginx welcome page and a versioned README for running the image.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| library/nginx/1.31/wwwroot/index.html | Adds the default Nginx welcome page content. |
| library/nginx/1.31/README.md | Documents how to run/query the new unikraft.org/nginx:1.31 image. |
| library/nginx/1.31/Kraftfile | Defines the Unikraft build configuration and lwIP settings for Nginx 1.31. |
| library/nginx/1.31/Dockerfile | Builds a minimal scratch rootfs by copying Nginx + runtime deps from nginx:1.31.0-alpine. |
| library/nginx/1.31/conf/nginx.conf | Adds the Nginx runtime configuration for the image. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Still waiting for WASP permissions to start the testing. @vTusharr In the meantime, please fix the issues mentioned by Copilot. Also, see my follow-up comment.
cd969f7 to
5eff2f7
Compare
|
@razvand gentle ping. |
razvand
left a comment
There was a problem hiding this comment.
Use a separate commit for the workflow.
Be sure to follow the commit best practices:
- Start with capital letter.
- Use present tense.
- Use a commit title and commit body.
- Sign your commit.
- Use the proper e-mail address for commit authorship and signature.
5eff2f7 to
6d64e0c
Compare
1c6fe97 to
739ae68
Compare
Adds an nginx 1.31.0 image based on alpine as a base, modelled on the existing 1.25 image. Signed-off-by: Tushar Verma <tusharVermaiota@proton.me>
Add the build and push workflow for the `unikraft.org/nginx:1.31` image, and list the image in the top-level README table. Signed-off-by: Tushar Verma <tusharVermaiota@proton.me>
Adds an nginx 1.31.0 image based on alpine as a base , modelled on the existing 1.25 image.
circumventing CVE which is present in earlier version