mirror of
https://github.com/stablyai/orca.git
synced 2026-11-01 17:47:40 +00:00
Neil
eb9d2f9a06
* fix(security): update Node runtimes for October security releases * fix(ci): compare normalized web file inventory without ordering artifacts
20 lines
985 B
Docker
20 lines
985 B
Docker
FROM node:22.23.4-bookworm@sha256:2bd396628eceb5c999a6e43731fab69d5fb98b94ba9d9d90b5f64575c5178765 AS patched-node
|
|
FROM node:22-bookworm@sha256:5647be709086c696ff32edaaf1c70cd26d1da6ab2b39c32f3c7b4c4a31957e37
|
|
|
|
COPY --from=patched-node /usr/local/bin/node /usr/local/bin/node
|
|
|
|
# Why: immutable snapshot inputs keep the SSH/Git fixture identical across rebuild dates.
|
|
RUN sed -i \
|
|
-e 's|http://deb.debian.org/debian-security|https://snapshot.debian.org/archive/debian-security/20260713T000000Z|' \
|
|
-e 's|http://deb.debian.org/debian|https://snapshot.debian.org/archive/debian/20260713T000000Z|' \
|
|
/etc/apt/sources.list.d/debian.sources \
|
|
&& apt-get -o Acquire::Check-Valid-Until=false update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
|
git=1:2.39.5-0+deb12u3 \
|
|
openssh-server=1:9.2p1-2+deb12u10 \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& mkdir -p /run/sshd /root/.ssh \
|
|
&& chmod 700 /root/.ssh
|
|
|
|
EXPOSE 22
|