upgrade base image to address vulnerabilities

This commit is contained in:
Your 2022-06-17 17:36:19 +00:00 committed by Tim Hockin
parent 055a886bf1
commit 5f59ea331d
2 changed files with 1 additions and 6 deletions

View File

@ -49,8 +49,6 @@
#############################################################################
FROM {ARG_FROM} as prep
RUN echo "deb http://deb.debian.org/debian/ buster-backports main contrib" > \
/etc/apt/sources.list.d/backports.list
RUN apt-get -q -y update
RUN apt-get -q -y upgrade
RUN apt-get -q -y install --no-install-recommends \
@ -59,9 +57,6 @@ RUN apt-get -q -y install --no-install-recommends \
socat \
openssh-client \
git
# We want a newer git than the norm.
RUN apt-get -q -y -t buster-backports install --no-install-recommends \
git
RUN apt-get -q -y autoremove
RUN rm -rf /var/lib/apt/lists/*

View File

@ -36,7 +36,7 @@ ALL_PLATFORMS := linux/amd64 linux/arm linux/arm64 linux/ppc64le linux/s390x
OS := $(if $(GOOS),$(GOOS),$(shell go env GOOS))
ARCH := $(if $(GOARCH),$(GOARCH),$(shell go env GOARCH))
BASEIMAGE ?= k8s.gcr.io/build-image/debian-base:buster-v1.10.0
BASEIMAGE ?= k8s.gcr.io/build-image/debian-base:bullseye-v1.3.0
IMAGE := $(REGISTRY)/$(BIN)
TAG := $(VERSION)__$(OS)_$(ARCH)