Merge pull request #2531 from Altinity/25.8-stable-alpine-cve-fix

Stable 25.8 - Update all apk packages

Author: mkmkme

docker/keeper/Dockerfile

@@ -16,7 +16,7 @@ RUN arch=${TARGETARCH:-amd64} \
     esac
 
 
-FROM alpine:3.21
+FROM alpine
 
 ENV LANG=en_US.UTF-8 \
     LANGUAGE=en_US:en \
@@ -84,8 +84,7 @@ RUN clickhouse-keeper --version \
     && chown root:clickhouse "${DEFAULT_LOG_DIR}" \
     && chmod ugo+Xrw -R "${DEFAULT_DATA_DIR}" "${DEFAULT_LOG_DIR}" "${DEFAULT_CONFIG_DIR}"
 
-RUN apk update
-RUN apk add --upgrade libssl3 libcrypto3
+RUN apk update && apk upgrade --no-cache
 
 # /var/lib/clickhouse is necessary due to the current default configuration for Keeper
 VOLUME "${DEFAULT_DATA_DIR}" /var/lib/clickhouse

docker/server/Dockerfile.alpine

@@ -91,8 +91,7 @@ RUN mkdir -p \
     && chown root:clickhouse "${DEFAULT_LOG_DIR}" \
     && chmod ugo+Xrw -R "${DEFAULT_DATA_DIR}" "${DEFAULT_LOG_DIR}" "${DEFAULT_CLIENT_CONFIG_DIR}" "${DEFAULT_SERVER_CONFIG_DIR}"
 
-RUN apk update
-RUN apk add --upgrade libssl3 libcrypto3
+RUN apk update && apk upgrade --no-cache
 
 VOLUME "${DEFAULT_DATA_DIR}"
 EXPOSE 9000 8123 9009