Skip to content

Commit 7b55244

Browse files
vitalii-codefreshVitalii Chyrka
and
Vitalii Chyrka
authored
chore(Cr-24805 security): updated ubuntu, git-lfs, busybox (#83)
* updated ubuntu, git-lfs, busybox -------- Co-authored-by: Vitalii Chyrka <[email protected]>
1 parent 959ccea commit 7b55244

File tree

3 files changed

+10
-18
lines changed

3 files changed

+10
-18
lines changed

.gitignore

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
.idea/

Dockerfile

+8-17
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,26 @@
11
#moving to ubuntu instead of debian to solve high vulnerabilities
2-
FROM ubuntu:jammy-20240212
2+
FROM ubuntu:noble-20240605
33

44
RUN apt-get update && \
55
apt-get install -y curl bash openssl git && \
66
apt-get clean
77

8-
# git-lfs v3.4.0 - last available at the 23.10.2023 and it contains bug. Don't update to the version 3.4.0 !!!
9-
# https://codefresh-io.atlassian.net/browse/CR-20633
10-
# Next preferred version must be >=3.4.1 and should be tested
11-
RUN apt-get install git-lfs=3.0.2-1 && \
12-
git lfs install
8+
RUN curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash && \
9+
apt-get install git-lfs=3.5.1 && \
10+
git lfs install
1311

1412
#installing busybox
15-
ARG BUSYBOX_VERSION=1.31.0
13+
ARG BUSYBOX_VERSION=1:1.36.1-6ubuntu3
1614

17-
RUN curl -sL https://busybox.net/downloads/binaries/${BUSYBOX_VERSION}-defconfig-multiarch-musl/busybox-x86_64 -o busybox && \
18-
ls -l busybox && \
19-
chmod +x busybox && \
20-
mv busybox /usr/bin/ && \
21-
ls /usr/bin/busybox && \
22-
busybox | head -n 1
23-
24-
25-
RUN ln -s /bin/busybox /usr/bin/[[
15+
RUN apt-get install busybox=${BUSYBOX_VERSION} && \
16+
ln -s /bin/busybox /usr/bin/[[
2617

2718
COPY ./start.sh /run/start.sh
2819
RUN chmod +x /run/start.sh
2920

3021
# USER nodeuser
3122
RUN addgroup --gid 3000 nodegroup \
32-
&& adduser --uid 3000 --home /home/nodeuser --ingroup nodegroup --shell /bin/sh --gecos "" --disabled-password nodeuser
23+
&& adduser --uid 3000 --home /home/nodeuser --ingroup nodegroup --shell /bin/sh --gecos "" --disabled-password nodeuser
3324
USER nodeuser
3425

3526
CMD ["/run/start.sh"]

service.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
version: 10.1.27
1+
version: 10.1.28

0 commit comments

Comments
 (0)