Check for updates on base image during build #263
Conversation
It is important to keep Docker images up-to date, as upstream images could have important security fixes, even using the same tag and version. When building images, it is possible to pass in a `--pull` flag to check if the base image has updates, and rebuild as necessary. This feature is available since 2014, and will still retain the image cache if there are no updates on the base image. [since 2014]: moby/moby#9281
bltavares
requested review from
Dylan-DPC-zz,
jamesmunns and
a team
as code owners
|
The images have been quite outdated, and while developing a GitHub Action similar to There has been a recent commit on master this year, in January, which didn't trigger new updates. This could be likely due to the change on user host the code, and Travis not being properly configured for the new I've also noticed that this project has changed maintainers, but the images still live under the previous Docker Hub account. I would be able to help change the code to point to the new user on Docker Hub, but I can't help with credential management and setup of Travis. There are other issues (eg: #261) that have noticed the missing image as well. How could I help to make new images available? |
|
Thanks bors: try |
tryBuild failed |
A couple of packages were not available anymore on Debian Package repository. This commit updates the names and version in order to fix the image building process
|
Some images had outdated packages not available on Debian repository anymore. I've pointed to existing packages on a follow up commit on this PR, in case you want to retry building it. |
Compiling recent Rust code requires 'libc6' at least 2.18. This commit updates the version to point to a newer linux wich contains libc6 2.19 by default.
|
bors: try |
tryBuild failed |
|
I think it will be necessary to change the url of Dropbear to point to their new releases path. |
The path has changed, and the previous path only had the current release. This commit points it to the new releases directory on the main website
|
@Dylan-DPC would you mind trying again? I've updated the url for |
|
@bltavares sure. some of the builds are failing due to a unrelated issue. Will still try this bors: try |
tryBuild failed |
mathk
added
the
S-waiting-on-review
Thanks for noticing them Co-Authored-By: Sean Leather <[email protected]>
|
Most of these changes are now in |
It is important to keep Docker images up-to date, as upstream images
could have important security fixes, even using the same tag and
version.
When building images, it is possible to pass in a
--pullflag to checkif the base image has updates, and rebuild as necessary. This feature is
available since 2014, and will still retain the image cache if there are
no updates on the base image.
Travis might need updated Docker version. It is documented how to update it on their docs if it becomes necessary.