From 017eb324b5cd36d362f2e78eb651b4702add9a0d Mon Sep 17 00:00:00 2001 From: CarlosFelipeOR Date: Thu, 25 Jun 2026 21:33:07 -0300 Subject: [PATCH] Upgrade Ubuntu packages to apply security fixes Signed-off-by: CarlosFelipeOR --- docker/server/Dockerfile.ubuntu | 16 ++++------------ 1 file changed, 4 insertions(+), 12 deletions(-) diff --git a/docker/server/Dockerfile.ubuntu b/docker/server/Dockerfile.ubuntu index 057cf0a04fb9..c9343ce82f3c 100644 --- a/docker/server/Dockerfile.ubuntu +++ b/docker/server/Dockerfile.ubuntu @@ -7,13 +7,13 @@ ARG DEBIAN_FRONTEND=noninteractive # ARG for quick switch to a given ubuntu mirror ARG apt_archive="http://archive.ubuntu.com" -# We shouldn't use `apt upgrade` to not change the upstream image. It's updated biweekly -# Exception: targeted --only-upgrade for selected packages to address CVEs without a general upgrade. +# Upgrade already installed Ubuntu packages to apply available security fixes +# without installing recommended packages. # user/group precreated explicitly with fixed uid/gid on purpose. # It is especially important for rootless containers: in that case entrypoint # can't do chown and owners of mounted volumes should be configured externally. -# We do that in advance at the begining of Dockerfile before any packages will be +# We do that in advance at the beginning of Dockerfile before any packages will be # installed to prevent picking those uid / gid by some unrelated software. # The same uid / gid (101) is used both for alpine and ubuntu. RUN sed -i "s|http://archive.ubuntu.com|${apt_archive}|g" /etc/apt/sources.list \ @@ -26,15 +26,7 @@ RUN sed -i "s|http://archive.ubuntu.com|${apt_archive}|g" /etc/apt/sources.list locales \ tzdata \ wget \ - && apt-get install --yes --no-install-recommends --only-upgrade \ - libgnutls30 \ - libssl3 \ - openssl \ - libsystemd0 \ - libudev1 \ - libgcrypt20 \ - sed \ - liblzma5 \ + && apt-get upgrade --yes --no-install-recommends \ && busybox --install -s \ && apt-get clean \ && rm -rf /var/lib/apt/lists/* /var/cache/debconf /tmp/*