From eddda9d25b9c45f9d6d4ecc11b7847b91e09e4c8 Mon Sep 17 00:00:00 2001 From: Nathan Kleyn Date: Tue, 26 Nov 2019 11:30:25 +0000 Subject: [PATCH] Switch to using alpine as a base instead of alpine/git. This image is very out of date and contains openssl versions with vulnerabilities. --- Dockerfile | 9 +++++---- README.md | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/Dockerfile b/Dockerfile index c381f3e..e69fb67 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,8 @@ -FROM alpine/git - -COPY README.md bin/* / +FROM alpine:3.10.3 ENV GIT_REPOS_PATH=/git-repos - ENTRYPOINT /entrypoint.sh && exec crond -f + +RUN apk add -U git less openssh + +COPY README.md bin/* / diff --git a/README.md b/README.md index 8136153..ab6d1af 100644 --- a/README.md +++ b/README.md @@ -36,7 +36,7 @@ docker run \ -v ~/.ssh/id_rsa:/id_rsa \ -e PRIVATE_KEY_PATH=/id_rsa \ -e PRIVATE_KEY_PASS=“supersecretpass” \ - -e GIT_REPOS=git@github.com:intenthq/gitkv.git,git@github.com:intenthq/anon.git + -e GIT_REPOS=git@github.com:intenthq/gitkv.git,git@github.com:intenthq/anon.git \ intenthq/git-puller ```