Always tag the version of an image explicitly DOK-DL3006
Bug risk
Minor
12 days ago
—
a year old
Always tag the version of an image explicitly
1FROM httpdAlways tag the version of an image explicitly
1FROM httpdAlways tag the version of an image explicitly
1FROM httpdAlways tag the version of an image explicitly
1FROM httpd AS developmentAlways tag the version of an image explicitly
1FROM httpd 2
3RUN apt update > /dev/null 2>&1
4RUN apt install -y curl postgresql-client redis ncat mariadb-client > /dev/null 2>&1
Description
You can never rely on the assumption that the latest tag points to a specific version of an image. Explicitly tagging the image with a specific version (e.g. ubuntu:12.04) ensures that your application will not break due to random changes across different versions of an image you depend on.
It also allows you to be more specific about different variants of the same image. A third advantage is that it acts as a sanity check for development. Since the image won't change under your feet at any point, you can eliminate it as a source for errors when developing a containerized application.
Bad Practice
FROM debian
Recommended
FROM debian:jessie