Skip to content

Commit e0ca6e5

Browse files
authored
Upgrade apk packages when building nginx image (#1167)
Problem: CVEs occasionally pop up in the base nginx image that haven't been addressed yet by the nginx team. Solution: Ensure that we upgrade apk packages to their latest versions to fix any possible CVEs if the base image has not yet been updated.
1 parent f20fe55 commit e0ca6e5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

build/Dockerfile.nginx

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ FROM nginx:1.25.2-alpine
44
ARG NJS_DIR
55
ARG NGINX_CONF_DIR
66

7-
RUN apk update && apk add --no-cache libcap \
7+
RUN apk update && apk upgrade && apk add --no-cache libcap \
88
&& mkdir -p /var/lib/nginx /usr/lib/nginx/modules \
99
&& setcap 'cap_net_bind_service=+ep' /usr/sbin/nginx \
1010
&& setcap -v 'cap_net_bind_service=+ep' /usr/sbin/nginx \

0 commit comments

Comments
 (0)