abernix / meteord

MeteorD - Docker Runtime for Meteor Apps for Production Deployments
https://registry.hub.docker.com/u/meteorhacks/meteord/
MIT License
93 stars 129 forks source link

Get security fixes in regularly #32

Closed albuch closed 5 years ago

albuch commented 6 years ago

To get all Debian security fixes in more frequently an automated build could be set up in Docker Hub listening on upstream repository changes via Repository links. https://docs.docker.com/docker-hub/builds/#repository-links

If corresponding Debian image changes the meteord image could be rebuilt and re-published under the same tag.

Currently the Debian base image has several critical security issues that have fixes available.

abernix commented 5 years ago

If you're willing to take a shot at doing this, that'd be great and a PR would be welcome! As it stands right now, the builds are automatic when pushed to CircleCI with the appropriate branch.

If you're unable, I'll keep doing them manually as I have time and with the Node.js security releases as guidance and if anyone pings me with anything critical.