allinone: want ability to upgrade base container

batfish / docker

Docker containers for Batfish and Pybatfish

Apache License 2.0

11 stars 14 forks source link

allinone: want ability to upgrade base container #82

Open dhalperi opened 2 years ago

dhalperi commented 2 years ago

Scenario:

batfish container has no security issues
allinone container, because it uses libc and other things like that, has security issues

Do not want to cut a new release (new Java), but rather re-release (and overwrite? bump? existing tag) allinone container only(?)

dhalperi commented 2 years ago

https://buildkite.com/batfish/batfish-vulnerability-scan/builds/721#387ca25c-414d-42d7-9c80-ea33dded1ed1

dhalperi commented 2 years ago

Maybe, for current latest=2022.03.16.1242 we would generate tag 2022.03.16.<new build number and then overwrite latest with it.

dhalperi commented 2 years ago

One manual hack is something like this:

cat allinone-upgrade.dockerfile

FROM batfish/allinone:<version>

RUN apt-get update \
    && apt-get upgrade -y \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* \
    && pip3 install --upgrade pillow

and then push this as latest or version. Iterated, however, this will result in a growing container as each time you do this it adds a new layer.