Skip to content

fix: run apt-get upgrade in Dockerfile - #498

Merged
NiccoloFei merged 2 commits into
cloudnative-pg:mainfrom
pjonsson:dockerfile-apt-get-upgrade
Sep 10, 2026
Merged

fix: run apt-get upgrade in Dockerfile#498
NiccoloFei merged 2 commits into
cloudnative-pg:mainfrom
pjonsson:dockerfile-apt-get-upgrade

Conversation

@pjonsson

Copy link
Copy Markdown
Contributor

This brings in the latest security updates
from Debian when building the image.

Fixes #494

@pjonsson
pjonsson requested a review from a team as a code owner August 20, 2026 10:21
@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Aug 20, 2026
@NiccoloFei
NiccoloFei force-pushed the dockerfile-apt-get-upgrade branch 2 times, most recently from 29dd6ba to eccead9 Compare September 10, 2026 13:46
pjonsson and others added 2 commits September 10, 2026 16:02
This brings in the latest security updates
from Debian when building the image.

Fixes cloudnative-pg#494

Signed-off-by: Peter A. Jonsson <jonsson.peter.a@gmail.com>
Other layers build on top of minimal, so
running the upgrade on the first minimal
layer is enough.

Signed-off-by: Niccolò Fei <niccolo.fei@enterprisedb.com>
@NiccoloFei
NiccoloFei force-pushed the dockerfile-apt-get-upgrade branch from eccead9 to ef2b217 Compare September 10, 2026 14:02
@NiccoloFei
NiccoloFei merged commit b9d9744 into cloudnative-pg:main Sep 10, 2026
15 of 21 checks passed
@pjonsson
pjonsson deleted the dockerfile-apt-get-upgrade branch September 10, 2026 14:37
ehbello added a commit to maarlab-rethinking/postgres-containers that referenced this pull request Sep 10, 2026
Brings in the removal of Debian bullseye (upstream cloudnative-pg#505), whose Debian LTS
ended on 2026-08-31: its packages left deb.debian.org and every build on it
had been 404-ing since, taking down the whole scheduled run because `minimal`
is the base of the chain. Also picks up `apt-get upgrade` during the build
(cloudnative-pg#498), which lands in `minimal` and so reaches every variant.

docker-bake.hcl merged with no conflict, upstream's retirement of the release
and of the deprecated rolling tags applying as-is. Bullseye then had to come
out of docker-bake.extra.hcl by hand -- its base image variable, its entry in
the extra-targets matrix, and the PostGIS constraint that existed only for it.
The catalogs for the release arrived as modify/delete conflicts, which
`merge=ours` does not cover, and were removed.

Down to 46 targets from 69: the 18 standard bullseye ones and the 5
extra-bullseye ones. README no longer claims PostGIS is unavailable on a
release that is no longer built.

Signed-off-by: Enrique Hernández Bello <enrique.hernandez@maarlab.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
ehbello added a commit to maarlab-rethinking/postgres-containers that referenced this pull request Sep 10, 2026
Brings in the removal of Debian bullseye (upstream cloudnative-pg#505), whose Debian LTS
ended on 2026-08-31: its packages left deb.debian.org and every build on it
had been 404-ing since, taking down the whole scheduled run because `minimal`
is the base of the chain. Also picks up `apt-get upgrade` during the build
(cloudnative-pg#498), which lands in `minimal` and so reaches every variant.

docker-bake.hcl merged with no conflict, upstream's retirement of the release
and of the deprecated rolling tags applying as-is. Bullseye then had to come
out of docker-bake.extra.hcl by hand -- its base image variable, its entry in
the extra-targets matrix, and the PostGIS constraint that existed only for it.
The catalogs for the release arrived as modify/delete conflicts, which
`merge=ours` does not cover, and were removed.

Down to 46 targets from 69: the 18 standard bullseye ones and the 5
extra-bullseye ones. README no longer claims PostGIS is unavailable on a
release that is no longer built.

Signed-off-by: Enrique Hernández Bello <enrique.hernandez@maarlab.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dockerfile does not run apt-get upgrade

3 participants