Keep tabs on the corrosion in your docker containers.
Corrator is a command line tool for querying docker containers and requesting version numbers for apps in them.
If you have to maintain lots of containers, each with their own set of applications and dependencies, you may be familiar with how difficult it can be to maintain currency. You don't want to let your dependencies go out of their support life-cycles, but you also don't want to have to update a master list somewhere any time you push an update.
Corrator lets you define a set of containers, each with a list of important dependencies. Running corrator will pull down the container, bash into it, and run a version command on each one. Then it spits out what it finds in minimal form.
For dependencies which happen to be tracked by the excellent endoflife.date service you can optionally ask corrator to look up the current end of life date for the version currently installed and tell you that too.
See the rust docs for this.
You can install corrator straight from crates.io with the following:
sh
cargo install corrator
Assuming you have a valid config file (see below), you can simply run corrator
from the command line.
sh
corrator
For additional options, see corrator --help
.
The heart of corrator is a simple toml
file with the following schema:
```toml [applications.bash]
version_command = "bash --version"
version_regex = '''GNU bash, version (?P
eol = { # The "product name" as it exists in endoflife.date # yes, I'm aware bash isn't actually on endoflife.date product_name = "bash"
# regex for which parts of version endofdate is looking for
# e.g., Rails only wants version in X.X format
version_regex = '''.+'''
}
[containers.ubuntu]
path = "ubuntu"
apps = [ "bash" ] ```
Corrator will look for this file in the following locations, in order:
~/.corrator.toml
CORRATOR_CONFIG_PATH
-c path_to_toml
There is also an example file in this repository to get you started.