Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update alpine base from 3.15.2 to latest patch version 3.15.4 #2202

Merged
merged 1 commit into from
Apr 19, 2022

Conversation

gaffneyd4
Copy link
Contributor

Updating the alpine base image to get the latest package updates.

Why do we want this PR?

Updating the base image upgrades packages to address vulnerabilities

If I run apk update && apk upgrade on the original alpine base image 3.15.2, the following upgrades are made:

➜ docker run --rm -ti localhost/atlantis-base:3.15.2 bash                  
bash-5.1# apk update -vvv
fetch https://dl-cdn.alpinelinux.org/alpine/v3.15/main/x86_64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.15/community/x86_64/APKINDEX.tar.gz
v3.15.4-28-gf3bb9d0183 [https://dl-cdn.alpinelinux.org/alpine/v3.15/main]
v3.15.4-38-gf7d0da3611 [https://dl-cdn.alpinelinux.org/alpine/v3.15/community]
OK: 15858 distinct packages available
bash-5.1# apk upgrade -vvvv
The following packages will be upgraded:
  busybox ssl_client zlib
After this operation, 0 B of additional disk space will be used.
(1/3) Upgrading busybox (1.34.1-r4 -> 1.34.1-r5)
bin/ (dir)
bin/busybox
bin/sh
etc/ (dir)
etc/logrotate.d/ (dir)
etc/logrotate.d/acpid
etc/network/ (dir)
etc/network/if-down.d/ (dir)
etc/network/if-post-down.d/ (dir)
etc/network/if-post-up.d/ (dir)
etc/network/if-pre-down.d/ (dir)
etc/network/if-pre-up.d/ (dir)
etc/network/if-up.d/ (dir)
etc/network/if-up.d/dad
etc/securetty
etc/udhcpd.conf
sbin/ (dir)
tmp/ (dir)
usr/ (dir)
usr/sbin/ (dir)
usr/share/ (dir)
usr/share/udhcpc/ (dir)
usr/share/udhcpc/default.script
var/ (dir)
var/cache/ (dir)
var/cache/misc/ (dir)
var/lib/ (dir)
var/lib/udhcpd/ (dir)
Executing busybox-1.34.1-r5.post-upgrade
(2/3) Upgrading ssl_client (1.34.1-r4 -> 1.34.1-r5)
usr/ (dir)
usr/bin/ (dir)
usr/bin/ssl_client
(3/3) Upgrading zlib (1.2.11-r3 -> 1.2.12-r0)
lib/ (dir)
lib/libz.so.1
lib/libz.so.1.2.12
lib/libz.so.1.2.11
Executing busybox-1.34.1-r5.trigger
OK: 37 packages, 126 dirs, 577 files, 28 MiB

Using the base alpine image of 3.15.4 and then performing the same update check yields the following output:

➜ docker run --rm -ti localhost/atlantis-base:3.15.4 bash
bash-5.1# apk update -vvvv
fetch https://dl-cdn.alpinelinux.org/alpine/v3.15/main/x86_64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.15/community/x86_64/APKINDEX.tar.gz
v3.15.4-39-g17994082e8 [https://dl-cdn.alpinelinux.org/alpine/v3.15/main]
v3.15.4-38-gf7d0da3611 [https://dl-cdn.alpinelinux.org/alpine/v3.15/community]
OK: 15855 distinct packages available
bash-5.1# apk upgrade -vvvv
After this operation, 0 B of additional disk space will be used.
OK: 37 packages, 126 dirs, 577 files, 28 MiB

In other words, using 3.15.4 shows we are up to date with no package upgrades required.

@gaffneyd4 gaffneyd4 requested a review from a team as a code owner April 15, 2022 15:04
Copy link
Member

@chenrui333 chenrui333 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@chenrui333 chenrui333 merged commit 22dec19 into runatlantis:master Apr 19, 2022
krrrr38 pushed a commit to krrrr38/atlantis that referenced this pull request Dec 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants