Bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities (#525

) * bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities Signed-off-by: Rocio Roman <[email protected]> Signed-off-by: Rocio Roman <[email protected]> * resolving conflict between glibc-2.30-r0 and nsswitch.conf Signed-off-by: Rocio Roman <[email protected]> * resolving missing symlink to ld-linux-x86-64.so.2 Signed-off-by: Rocio Roman <[email protected]> * fixed typo Signed-off-by: Rocio Roman <[email protected]> * removed unnecessary symlink step added earlier:4f92e25 Signed-off-by: Rocio Roman <[email protected]> --------- Signed-off-by: Rocio Roman <[email protected]> Signed-off-by: Rocio Roman <[email protected]>
litmuschaos · Jul 25, 2024 · 51597bc · 51597bc
1 parent 06d4bf2
commit 51597bc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/custom/hardened-alpine/experiment/Dockerfile b/custom/hardened-alpine/experiment/Dockerfile
@@ -1,7 +1,7 @@
 # This Dockerfile contains the hardened alpine image with all the
 # litmus experiment dependencies installed.
 # It is also made non-root, sudo-enabled with default litmus directory.
-FROM alpine:3.16.2
+FROM alpine:3.16.9
 
 LABEL maintainer="LitmusChaos"
 
@@ -38,7 +38,7 @@ RUN set -ex && \
      apk --update add libstdc++ curl ca-certificates && \
      for pkg in glibc-${GLIBC_VERSION} glibc-bin-${GLIBC_VERSION}; \
          do curl -sSL ${GLIBC_REPO}/releases/download/${GLIBC_VERSION}/${pkg}.apk -o /tmp/${pkg}.apk; done && \
-     apk add --allow-untrusted /tmp/*.apk && \
+     apk add --allow-untrusted --force-overwrite /tmp/*.apk && \
      rm -v /tmp/*.apk && \
      /usr/glibc-compat/sbin/ldconfig /lib /usr/glibc-compat/lib