Releases: slimtoolkit/slim
Releases · slimtoolkit/slim
New include flags for the build command and sensor quality enhancements
Improvements
- New include flags for the
build
command (--include-workdir
) - Debug/trace logging improvements
Bug Fixes
- yes :)
Binaries
Build them from source or download from a CDN location:
- Linux
- Linux ARM
- Linux ARM64
- Mac
- Mac M1
- Containerized:
docker pull dslim/slim
Name change, xray enhancements, basic support for multiple build engines and sensor bug fixes
New Features
- Base image metadata for xray
- Basic support for multiple image build engines (
--image-build-engine
,--image-build-arch
parameters)
Improvements
- Dockerfile reverse engineering updates
- buildkit Dockerfile instruction support
- name change
Bug Fixes
- many :)
Binaries
Build them from source or download from a CDN location:
Sensor quality/testability enhancements and bugfixes
Binaries
Build them from source or download from a CDN location:
Debug command, console-format flag, host-exec and host-exec-file flags, bug fixes
New Features
- Experimental
debug
command - JSON console output format
Improvements
- refactored
http-probe-exec
andhttp-probe-exec-file
to behost-exec
andhost-exec-file
(breaking change)
Bug Fixes
- many :)
Binaries
Build them from source or download from a CDN location:
Experimental Node.js, Next.js(React.js), Nuxt.js(Vue.js) app include flags
New Features
- Experimental Node.js package include flag (
--include-node-package
) - Experimental Next.js (React.js) app include flags (
--include-app-next-*
) - Experimental Nuxt.js (Vue.js) app include flags (
--include-app-nuxt-*
) - Ability to disable the ptrace data source (
--rta-source-ptrace
)
Improvements
- Various monitoring engine enhancements
Bug Fixes
- Healtheck instruction handling fix
Binaries
Build them from source or download from a CDN location:
Improved compose support
New Features
- Container probe feature to use one of the compose services to test/probe the target container (
--container-probe-compose-svc
flag andcontainer.probe
continue-after mode) - Ability to override the container image name and/or tag when targeting a compose service (
--target-compose-svc-image
flag) - Ability to wait before executing the HTTP probes (
--http-probe-start-wait
flag) - Ability to wait before starting each compose service (
--compose-svc-start-wait
flag) - Basic FastCGI protocol support in HTTP probes (docs TBD)
- New
registry
command and a basicpull
subcommand --include-new
build flag to keep new files created by target during dynamic analysis- Supprot for stored global param in
slim.config.json
Improvements
- Improved containerized CI/CD environments support (
sensor-ipc-mode
andsensor-ipc-endpoint
flags forbuild
andprofile
) - Docker host detection improvements
- Target container IP detection improvements
- Not minifying onbuild base images by default
- Not minifying already minified images
- Cleanup container resources on exit
include-cert-all
build flag enabled by default- Propagate logging flags to sensor
- Not using default http probe if custom probes are already defined
- Many compose related enhancements (volume lookup enhancements, compose image detection and error handling, etc)
- Various monitoring engine enhancements
- Migrate from urfave/cli/v1 to urfave/cli/v2
- Dockerfile reverse engineering enhancements (HEALTHCHECK instruction support, improved RUN instruction reversing when ARGs are also used)
Bug Fixes
- Volume mounting bug fixes for compose
Binaries
Build them from source or download from a CDN location:
Improved container analysis and compose support
New Features
- Install command / docker cli plugin install option (preview version)
Improvements
- Container and compose link handling enhancements
- Volume mounting enhancements
- Static analysis improvements
- Symlink handling improvements for builds
- Collecting file check filesystem activity
- Entrypoint/cmd override handling improvements
Bug Fixes
- Volume mounting bug fixes for compose
Binaries
Build them from source or download from a CDN location:
Improved docker-compose support, other enhancements and bug fixes
New Features
- Ability to pull images from private registries (
--registry-account
,--registry-secret
,--docker-config-path
flags)
Improvements
- Additional flags for compose (
dep-include-target-compose-svc-deps
,compose-env-nohost
,compose-env-file
,compose-workdir
,compose-project-name
) - Variable substitution support in compose
- Detect duplicates by default in xray
- Resource cleanup when the build command exits
delete-generated-fat-image
flag to cleanup the non-optimized images whendocker-slim
builds images from source/Dockerfile- Improved
maintainer
info collection for xray
Bug Fixes
- Volume mounting bug fixes for compose
Binaries
Build them from source or download from a CDN location:
Experimental docker-compose support for the build command
Features
- Experimental docker-compose support for the build command
- Include cert flags to make it easier to keep certificate data in the optimized images
Improvements
- Install script
- Original image platform information in optimized images
Binaries
Build them from source or download from a CDN location:
Cert detection for xray, various bug fixes and enhancements
Features
- Cert detection for xray
Improvements
- Add platform information to minified image (from original image)
Bug Fixes
- Cleanup partially saved images for xray
Binaries
Build them from source or download from a CDN location: