upgrade base image to address vulnerabilities
This commit is contained in:
parent
055a886bf1
commit
5f59ea331d
|
|
@ -49,8 +49,6 @@
|
|||
#############################################################################
|
||||
FROM {ARG_FROM} as prep
|
||||
|
||||
RUN echo "deb http://deb.debian.org/debian/ buster-backports main contrib" > \
|
||||
/etc/apt/sources.list.d/backports.list
|
||||
RUN apt-get -q -y update
|
||||
RUN apt-get -q -y upgrade
|
||||
RUN apt-get -q -y install --no-install-recommends \
|
||||
|
|
@ -59,9 +57,6 @@ RUN apt-get -q -y install --no-install-recommends \
|
|||
socat \
|
||||
openssh-client \
|
||||
git
|
||||
# We want a newer git than the norm.
|
||||
RUN apt-get -q -y -t buster-backports install --no-install-recommends \
|
||||
git
|
||||
RUN apt-get -q -y autoremove
|
||||
RUN rm -rf /var/lib/apt/lists/*
|
||||
|
||||
|
|
|
|||
2
Makefile
2
Makefile
|
|
@ -36,7 +36,7 @@ ALL_PLATFORMS := linux/amd64 linux/arm linux/arm64 linux/ppc64le linux/s390x
|
|||
OS := $(if $(GOOS),$(GOOS),$(shell go env GOOS))
|
||||
ARCH := $(if $(GOARCH),$(GOARCH),$(shell go env GOARCH))
|
||||
|
||||
BASEIMAGE ?= k8s.gcr.io/build-image/debian-base:buster-v1.10.0
|
||||
BASEIMAGE ?= k8s.gcr.io/build-image/debian-base:bullseye-v1.3.0
|
||||
|
||||
IMAGE := $(REGISTRY)/$(BIN)
|
||||
TAG := $(VERSION)__$(OS)_$(ARCH)
|
||||
|
|
|
|||
Loading…
Reference in New Issue