Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rebuild docker container to patch for CVE-2019-14697 #255

Closed
thomasv314 opened this issue Feb 18, 2020 · 1 comment · Fixed by #263
Closed

Rebuild docker container to patch for CVE-2019-14697 #255

thomasv314 opened this issue Feb 18, 2020 · 1 comment · Fixed by #263

Comments

@thomasv314
Copy link

thomasv314 commented Feb 18, 2020

#230 incremented the base version of Alpine from 3.7 to 3.10 to patch CVE-2019-14697

https://hub.docker.com/r/jtblin/kube2iam is still built from the Alpine 3.7 base

Would it be possible for an updated image to be built and pushed to docker hub?

@grosser
Copy link

grosser commented Feb 29, 2020

@jtblin is there some regular issue/PR grooming going on or is there someone we can ping on issues like that ?

@thomasv314 you can build your own (steps by @uthark)

ARG REPO=https://github.com/jtblin/kube2iam.git
ARG SHA=796b988765a075548cbcb1af4a9fc05b4adc8588

FROM golang:1.14 AS BUILDER
ARG REPO
ARG SHA

WORKDIR /go/src/github.com/jtblin/kube2iam
ENV ARCH=linux
ENV CGO_ENABLED=0
RUN git clone ${REPO} . && git reset --hard ${SHA}
RUN make setup && make build

FROM alpine:3.11.3

RUN apk --no-cache add \
    ca-certificates \
    iptables

COPY --from=BUILDER /go/src/github.com/jtblin/kube2iam/build/bin/linux/kube2iam /bin/kube2iam

ENTRYPOINT ["kube2iam"]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants