docker: Pin to a particular release of Debian Jessie via sha256.

This is done to more explicitly track what version of Debian Jessie is
being used as a base image. It will also ensure that it is properly
updated on the VM even if we forget. This also should help CI and VM
builds stay speedy by using the cache even when there is a newer version
of Debian Jessie. In the long run, we may wish to re-evaluate this
strategy and fix our CI and deployment systems so as to be able to use
the latest version of Debian Jessie with important CVE and other fixes.
This commit is contained in:
John Kirkham
2016-03-06 21:11:39 -05:00
parent a5cc245a7a
commit 5880e3c41e
2 changed files with 5 additions and 2 deletions

View File

@@ -1,6 +1,8 @@
# Copyright (c) Jupyter Development Team. # Copyright (c) Jupyter Development Team.
# Distributed under the terms of the Modified BSD License. # Distributed under the terms of the Modified BSD License.
FROM debian:jessie
# Debian Jessie image released 2016 March 01.
FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e
MAINTAINER Jupyter Project <jupyter@googlegroups.com> MAINTAINER Jupyter Project <jupyter@googlegroups.com>

View File

@@ -1,7 +1,8 @@
# Copyright (c) Jupyter Development Team. # Copyright (c) Jupyter Development Team.
# Distributed under the terms of the Modified BSD License. # Distributed under the terms of the Modified BSD License.
FROM debian:jessie # Debian Jessie image released 2016 March 01.
FROM debian@sha256:a9c958be96d7d40df920e7041608f2f017af81800ca5ad23e327bc402626b58e
MAINTAINER Jupyter Project <jupyter@googlegroups.com> MAINTAINER Jupyter Project <jupyter@googlegroups.com>