docker: Pin to a particular release of Debian Jessie via sha256.

This is done to more explicitly track what version of Debian Jessie is being used as a base image. It will also ensure that it is properly updated on the VM even if we forget. This also should help CI and VM builds stay speedy by using the cache even when there is a newer version of Debian Jessie. In the long run, we may wish to re-evaluate this strategy and fix our CI and deployment systems so as to be able to use the latest version of Debian Jessie with important CVE and other fixes.
jupyter · Mar 7, 2016 · 5880e3c · 5880e3c
1 parent a5cc245
commit 5880e3c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/minimal-kernel/Dockerfile b/minimal-kernel/Dockerfile
@@ -1,6 +1,8 @@
 # Copyright (c) Jupyter Development Team.
 # Distributed under the terms of the Modified BSD License.
-FROM debian:jessie
+
+# Debian Jessie image released 2016 March 01.
+FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e
 
 MAINTAINER Jupyter Project <jupyter@googlegroups.com>
 

diff --git a/minimal-notebook/Dockerfile b/minimal-notebook/Dockerfile
@@ -1,7 +1,8 @@
 # Copyright (c) Jupyter Development Team.
 # Distributed under the terms of the Modified BSD License.
 
-FROM debian:jessie
+# Debian Jessie image released 2016 March 01.
+FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e
 
 MAINTAINER Jupyter Project <jupyter@googlegroups.com>