Skip to content

fix(docker): upgrade OS packages in release images #9264

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
klesh merged 1 commit into from
Oct 28, 2026
Merged

fix(docker): upgrade OS packages in release images #9264

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions backend/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,9 @@ RUN cd /usr/local/deps/target/lib && \

FROM python:3.11-slim-bookworm as base

# apt-get upgrade picks up Debian security fixes that the base tag does not contain yet
RUN apt-get update && \
apt-get upgrade -y && \
apt-get install -y python3-dev python3-pip tar pkg-config curl libssh2-1 zlib1g libffi-dev default-libmysqlclient-dev libpq-dev tini git openssh-client corkscrew && \
apt-get clean && \
rm -fr /usr/share/doc/* \
Expand Down
7 changes: 6 additions & 1 deletion config-ui/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,12 @@ WORKDIR /usr/share/nginx/html
RUN rm -rf ./*
COPY --from=builder /home/node/code/dist/. ./
EXPOSE 4000 4443
RUN apt update && apt install -y apache2-utils iproute2
# apt-get upgrade picks up Debian security fixes that the base tag does not contain yet
RUN apt-get update && \
apt-get upgrade -y && \
apt-get install -y apache2-utils iproute2 && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
COPY --from=builder /home/node/code/nginx.sh /usr/bin/nginx.sh
RUN chmod +x /usr/bin/nginx.sh
RUN chgrp -R 0 /etc/nginx /var/log/nginx /usr/share/nginx /run && \
Expand Down
4 changes: 3 additions & 1 deletion grafana/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,8 +37,10 @@ ENV GF_SERVER_PROTOCOL=http
ENV GF_SERVER_DOMAIN=localhost:3000
ENV GF_SERVER_ROOT_URL=http://localhost:3000/grafana
USER root
# apk upgrade picks up Alpine security fixes that the base tag does not contain yet
# grafana-piechart-panel removed: dashboards use the core "piechart" panel type
RUN chmod +x /entrypoint.sh && \
RUN apk upgrade --no-cache && \
chmod +x /entrypoint.sh && \
chgrp -R 0 /etc/grafana /usr/share/grafana /var/lib/grafana && \
chmod -R g=u /etc/grafana /usr/share/grafana /var/lib/grafana
USER 101
Expand Down
Loading