starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-28 08:02:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

force a fresh apt-get upgrade in docker images via APT_REFRESH (#12026)

Browse Source 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-10-26 18:06:25 +01:00
committed by GitHub
co-authored by Claude Opus 5.5
parent 6939454edb
commit cd4e55de7d
3 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+6 -2
View File
@@ -169,8 +169,12 @@ ENV UV_TOOL_DIR=/usr/local/uv
ENV PATH /usr/local/bin:/root/.local/bin:/tmp/.local/bin:$PATH
RUN apt-get update \
# The build cache keeps the apt layer while the base image digest and this line are unchanged, so
# Debian security updates are not picked up by later builds. Bump to force a fresh apt-get upgrade;
# bump it in docker/DockerfileSlim and docker/DockerfileSlimEe too.
ARG APT_REFRESH=1
RUN echo "apt refresh ${APT_REFRESH}" \
&& apt-get update \
&& apt-get upgrade -y \
&& apt-get install -y --no-install-recommends netbase tzdata ca-certificates wget curl jq unzip build-essential unixodbc xmlsec1 tini gnupg libargon2-1 \
&& if echo "$features" | grep -q "ee"; then apt-get install -y --no-install-recommends libsasl2-modules-gssapi-mit krb5-user; fi \
docker/DockerfileSlim
+4 -1
View File
@@ -44,7 +44,10 @@ ENV UV_TOOL_DIR=/usr/local/uv
ENV PATH=/usr/local/bin:/root/.local/bin:/tmp/.local/bin:$PATH
# Install system dependencies
RUN apt-get update \
# Bump to force a fresh apt-get upgrade past the build cache; keep in step with ../Dockerfile.
ARG APT_REFRESH=1
RUN echo "apt refresh ${APT_REFRESH}" \
&& apt-get update \
&& apt-get upgrade -y \
&& apt-get install -y --no-install-recommends ca-certificates wget curl git jq unzip unixodbc xmlsec1 gnupg lsb-release libgnutls30t64 libgcrypt20 \
&& apt-get clean \
docker/DockerfileSlimEe
+4 -1
View File
@@ -44,7 +44,10 @@ ENV UV_TOOL_DIR=/usr/local/uv
ENV PATH=/usr/local/bin:/root/.local/bin:/tmp/.local/bin:$PATH
# Install system dependencies
RUN apt-get update \
# Bump to force a fresh apt-get upgrade past the build cache; keep in step with ../Dockerfile.
ARG APT_REFRESH=1
RUN echo "apt refresh ${APT_REFRESH}" \
&& apt-get update \
&& apt-get upgrade -y \
&& apt-get install -y --no-install-recommends ca-certificates wget curl git jq unzip unixodbc xmlsec1 gnupg lsb-release libgnutls30t64 libgcrypt20 \
&& apt-get clean \