Comment on XZ Utils Backdoor Still Lurking in Docker ImagesparentComments−jiggawatts1yLet's say you have image "ProdWebAppFoo-2025-08-01" and you used this to deploy three VMs in a scale set or whatever.Then a developer deploys their "loose files" on top a couple of times, so now you have the image plus god-knows-what.The VM scale set scales out.What version of the app is running on which instance?Answer: Mixed versions.−charcircuit1yso now you have the image plus god-knows-what.Rsync is smart enought to figure out how to get parity.What version of the app is running on which instance?There is always going to be a time during a rollout where there are mixed versions running.−jiggawatts1ySure, rolling forward you expect mixed versions.Nobody expects a month old version to occasionally turn up and then mysteriously disappear when some rsync job catches up.
Comments
Let's say you have image "ProdWebAppFoo-2025-08-01" and you used this to deploy three VMs in a scale set or whatever.
Then a developer deploys their "loose files" on top a couple of times, so now you have the image plus god-knows-what.
The VM scale set scales out.
What version of the app is running on which instance?
Answer: Mixed versions.
Rsync is smart enought to figure out how to get parity.
There is always going to be a time during a rollout where there are mixed versions running.
Sure, rolling forward you expect mixed versions.
Nobody expects a month old version to occasionally turn up and then mysteriously disappear when some rsync job catches up.