-
Notifications
You must be signed in to change notification settings - Fork 6k
Pin dockerfile version. #32418
Pin dockerfile version. #32418
Conversation
ci/docker/build/Dockerfile
Outdated
| @@ -1,4 +1,4 @@ | |||
| FROM debian:stretch | |||
| FROM debian:bullseye-slim@sha256:82da53aa627b9d5032a1e57903356b8f34d613a5bc1e07ae5e9149bd88fa3128 | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In the past, it looks like this was updated to match the LUCI / Framework version: #25009.
Is that also what is happening here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@godofredoc friendly ping on this question.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry somehow I didn't see this question. LUCI is still on stretch, I can get it back to stretch with the pinned version or we can be proactive and use the Ubuntu version Dart is currently using and that we are planning to migrate to. What option do you think will work better?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can this file take comments, or is there a readme in this directory that can be updated to explain what's going on? Being proactive sgtm, but how will this get updated to match in the future?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, it supports comments. As long as they are on the same major version the minor updates will be applied by dependabot in this file and by apt-get upgrade on the VMs.
| mtools \ | ||
| nasm \ | ||
| net-tools \ | ||
| openjdk-8-jdk \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why are these being removed? Are they no longer needed, or do they appear in the new image by default?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They do not exist on the default packages anymore and seem like they are not needed. Waiting for the cirrus test to complete to validate they are not needed anymore.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Confirmed that they are not needed anymore.
This is part of the security effort to pin all the docker dependencies across all the flutter repositories.
|
@zanderso config file updated to use ubuntu:bionic and it is ready for review. |
|
This pull request is not suitable for automatic merging in its current state.
|
This is part of the security effort to pin all the docker dependencies
across all the flutter repositories.
Pre-launch Checklist
writing and running engine tests.
///).If you need help, consider asking for advice on the #hackers-new channel on Discord.