From 1b514ce9197181b31a1bf1926e7dc451326e289d Mon Sep 17 00:00:00 2001 From: Ciprian Hacman Date: Tue, 13 Oct 2026 21:43:02 +0300 Subject: [PATCH] Upgrade Debian packages when building the image debian-base is only rebuilt on demand, so run apt-get dist-upgrade on top of it to pick up current Debian security updates with every image build. Also install libsystemd0 instead of libsystemd-dev; the runtime image only needs the shared library. --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index cfa069d39..a7e4091f2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,7 +22,7 @@ RUN GOARCH=${TARGETARCH} make bin/node-problem-detector bin/health-checker bin/l FROM registry.k8s.io/build-image/debian-base:bookworm-v1.0.8@sha256:bb933ac3606ff3f69854a7eba5da1eaef5064ef62d83f3cb0e4be40eb53522e0 AS base -RUN clean-install util-linux bash libsystemd-dev +RUN apt-get update && apt-get dist-upgrade -y && clean-install util-linux bash libsystemd0 # Avoid symlink of /etc/localtime. RUN test -h /etc/localtime && rm -f /etc/localtime && cp /usr/share/zoneinfo/UTC /etc/localtime || true