From 51597bca9c4f866532b5a3e1a95f3b14a5b64b0e Mon Sep 17 00:00:00 2001 From: Rocio Roman Date: Thu, 25 Jul 2024 00:28:51 -0700 Subject: [PATCH] Bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities (#525) * bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities Signed-off-by: Rocio Roman Signed-off-by: Rocio Roman * resolving conflict between glibc-2.30-r0 and nsswitch.conf Signed-off-by: Rocio Roman * resolving missing symlink to ld-linux-x86-64.so.2 Signed-off-by: Rocio Roman * fixed typo Signed-off-by: Rocio Roman * removed unnecessary symlink step added earlier:4f92e25 Signed-off-by: Rocio Roman --------- Signed-off-by: Rocio Roman Signed-off-by: Rocio Roman --- custom/hardened-alpine/experiment/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/custom/hardened-alpine/experiment/Dockerfile b/custom/hardened-alpine/experiment/Dockerfile index 86deff2e..1d2f3be9 100644 --- a/custom/hardened-alpine/experiment/Dockerfile +++ b/custom/hardened-alpine/experiment/Dockerfile @@ -1,7 +1,7 @@ # This Dockerfile contains the hardened alpine image with all the # litmus experiment dependencies installed. # It is also made non-root, sudo-enabled with default litmus directory. -FROM alpine:3.16.2 +FROM alpine:3.16.9 LABEL maintainer="LitmusChaos" @@ -38,7 +38,7 @@ RUN set -ex && \ apk --update add libstdc++ curl ca-certificates && \ for pkg in glibc-${GLIBC_VERSION} glibc-bin-${GLIBC_VERSION}; \ do curl -sSL ${GLIBC_REPO}/releases/download/${GLIBC_VERSION}/${pkg}.apk -o /tmp/${pkg}.apk; done && \ - apk add --allow-untrusted /tmp/*.apk && \ + apk add --allow-untrusted --force-overwrite /tmp/*.apk && \ rm -v /tmp/*.apk && \ /usr/glibc-compat/sbin/ldconfig /lib /usr/glibc-compat/lib