From 5880e3c41e6e01c58992d1f8c6972e514b04fffc Mon Sep 17 00:00:00 2001 From: John Kirkham Date: Sun, 6 Mar 2016 21:11:39 -0500 Subject: [PATCH] docker: Pin to a particular release of Debian Jessie via sha256. This is done to more explicitly track what version of Debian Jessie is being used as a base image. It will also ensure that it is properly updated on the VM even if we forget. This also should help CI and VM builds stay speedy by using the cache even when there is a newer version of Debian Jessie. In the long run, we may wish to re-evaluate this strategy and fix our CI and deployment systems so as to be able to use the latest version of Debian Jessie with important CVE and other fixes. --- minimal-kernel/Dockerfile | 4 +++- minimal-notebook/Dockerfile | 3 ++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/minimal-kernel/Dockerfile b/minimal-kernel/Dockerfile index 7d8128b1..8bb37f15 100644 --- a/minimal-kernel/Dockerfile +++ b/minimal-kernel/Dockerfile @@ -1,6 +1,8 @@ # Copyright (c) Jupyter Development Team. # Distributed under the terms of the Modified BSD License. -FROM debian:jessie + +# Debian Jessie image released 2016 March 01. +FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e MAINTAINER Jupyter Project diff --git a/minimal-notebook/Dockerfile b/minimal-notebook/Dockerfile index d4dcb368..30777f17 100644 --- a/minimal-notebook/Dockerfile +++ b/minimal-notebook/Dockerfile @@ -1,7 +1,8 @@ # Copyright (c) Jupyter Development Team. # Distributed under the terms of the Modified BSD License. -FROM debian:jessie +# Debian Jessie image released 2016 March 01. +FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e MAINTAINER Jupyter Project