Where do you report bugs with DHI hardened images?

Docker Hub
1

I don’t think this is a security issue or anything, but the image has dirs that look like un-interpreted env vars.

sudo docker create --name="tmp_$$" dhi.io/php:8.2.30-debian13-fpm
sudo docker export tmp_$$ | tar t | head -n 10

${PHP_INI_DIR}/
${PHP_INI_DIR}/conf.d/
${PHP_INI_DIR}/conf.d/fpm.ini
.dockerenv
bin
boot/
dev/
dev/console
dev/pts/
dev/shm/
3

You can report bugs in the dhi catalog repository:

Update: it seems like this line is responsible:
https://github.com/docker-hardened-images/catalog/blob/main/image/php/debian-13/8.2-fpm.yaml#L273

1 Like