Pin versions in
apt get install DOK-DL3008
Bug risk
10 days ago
—
8 months old
Pin versions in apt get install. Instead of
apt-get install <package> use apt-get install <package>=<version> 6ARG KUBECTL_ARCH=amd64
7
8
9RUN apt-get update && apt-get -y install default-mysql-client postgresql-client redis-tools telnet10
11SHELL ["/bin/bash", "-o", "pipefail", "-c"]
12Pin versions in apt get install. Instead of
apt-get install <package> use apt-get install <package>=<version>36
37FROM golang:1.16 AS package
38
39RUN apt-get update && apt-get -y install upx-ucl40
41WORKDIR /usr/src/convox
42Pin versions in apt get install. Instead of
apt-get install <package> use apt-get install <package>=<version>51ARG DOCKER_ARCH=x86_64
52ARG KUBECTL_ARCH=amd64
53
54RUN apt-get -qq update && apt-get -qq -y install curl default-mysql-client postgresql-client redis-tools telnet skopeo55
56SHELL ["/bin/bash", "-o", "pipefail", "-c"]
57
Description
Version pinning forces the build to retrieve a particular version regardless of what’s in the cache. This technique can also reduce failures due to unanticipated changes between versions of dependencies.
You can read more about version pinning here
Bad Practice
FROM debian:buster
RUN apt-get install python
Recommended
FROM debian:buster
RUN apt-get install python=2.7