Dockerfile icon indicating copy to clipboard operation
Dockerfile copied to clipboard

Debian 11 release

Open tractorcow opened this issue 4 years ago • 4 comments

I am looking to update our current php 7.4 stack to debian 11 for security reasons, but the webdevops 7.4 images only go up to debian 10.

Will there be any debian 11 releases including 7.4, or will that only be considered for newer php 8.x versions?

I had a look at the amount of work that went into the earlier release (https://github.com/webdevops/Dockerfile/pull/316) and I wasn't sure if that was something I could comfortably contribute myself.

Specifically something like webdevops/php-nginx:7.4-debian-11 would be ideal, but what practically is in the roadmap?

tractorcow avatar Oct 11 '21 03:10 tractorcow

The base of a container isn't that important and also Debian 10 has LTS until mid of 2024 with security updates.

xf- avatar Oct 30 '21 15:10 xf-

Just to follow up on this, my motivation was that I wanted to run the later version of a few components (e.g. nginx), but I managed to update the current debian 10 image instead of worrying about debian 11. This might help someone else with the same issue in mind. :)

nginx.list

deb http://nginx.org/packages/debian/ buster nginx
deb-src http://nginx.org/packages/debian/ buster nginx

Dockerfile

ARG APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE="1"
COPY ./docker/nginx.list /etc/apt/sources.list.d/nginx.list
RUN curl -L https://nginx.org/keys/nginx_signing.key | apt-key add -
RUN apt-get clean all
RUN apt-get update
RUN apt-get remove -y nginx nginx-common nginx-full
RUN echo "N\n" | DEBIAN_FRONTEND=noninteractive apt-get install -yq nginx
RUN apt-get upgrade
RUN rm /etc/nginx/conf.d/default.conf # Remove config that interferes with defaut webdevops setup

tractorcow avatar Nov 17 '21 02:11 tractorcow

This sounds really stupid! They not run some container without nginx and use a nginx alpine in front. Feels like you are treating a container like a VM.

xf- avatar Nov 17 '21 02:11 xf-

Well I could do it that way, but I'm just upgrading and security patching some legacy infrastructure, not redesigning it. It meets my needs. :)

tractorcow avatar Nov 17 '21 04:11 tractorcow