mirror of
https://github.com/verdaccio/verdaccio.git
synced 2024-12-16 21:56:25 -05:00
feat: update docker base node to 14.x in 4.x branch (#3046)
* Update node to 14.18.3 v14.18.3 of node fixes a bunch of security vulnerabilities. Specifically: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22921 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22918 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22940 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22960 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22959 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44532 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44533 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44531 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22931 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3672 * Use node:14-alpine for image * Fix docker build by installing `python2` instead of `python` I simply followed what was done in https://github.com/verdaccio/verdaccio/pull/2644
This commit is contained in:
parent
4fd08e6355
commit
f40ea10d1f
1 changed files with 3 additions and 3 deletions
|
@ -1,10 +1,10 @@
|
|||
FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.17.0-alpine as builder
|
||||
FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14-alpine as builder
|
||||
|
||||
ENV NODE_ENV=production \
|
||||
VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
|
||||
|
||||
RUN apk --no-cache add openssl ca-certificates wget && \
|
||||
apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
|
||||
apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python2 && \
|
||||
wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
|
||||
wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
|
||||
apk add glibc-2.25-r0.apk
|
||||
|
@ -23,7 +23,7 @@ RUN yarn config set npmRegistryServer $VERDACCIO_BUILD_REGISTRY && \
|
|||
|
||||
|
||||
|
||||
FROM node:14.17.0-alpine
|
||||
FROM node:14-alpine
|
||||
LABEL maintainer="https://github.com/verdaccio/verdaccio"
|
||||
|
||||
ENV VERDACCIO_APPDIR=/opt/verdaccio \
|
||||
|
|
Loading…
Reference in a new issue