mirror of
https://github.com/fleetdm/fleet
synced 2026-05-24 09:28:54 +00:00
6032c137e5
Resolves #43671. Bumps the Alpine base image from 3.23.3 to 3.23.4 in the Dockerfiles that produce published images, picking up patched openssl, musl, and zlib packages. Follows the same pattern as #38977. ### CVEs resolved - HIGH: CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31790, CVE-2026-2673, CVE-2026-40200 - MEDIUM: CVE-2026-27171, CVE-2026-6042, CVE-2026-22184 ### Test plan - CI image build passes. - Trivy/ECR scan on the resulting fleetdm/fleet image confirms the nine listed CVEs are gone. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Updated Docker base images to Alpine 3.23.4 across infrastructure and deployment components for improved stability and security. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
36 lines
1.6 KiB
Docker
36 lines
1.6 KiB
Docker
FROM golang:1.26.2-alpine3.23@sha256:80fbb8f9b2fa541a7d34378f1ad10f4f1c433817c4ed39ddb3e2f3ec3e961271
|
|
ARG TAG
|
|
RUN apk add git sqlite gcc musl-dev sqlite-dev
|
|
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/cmd/osquery-perf/ && go build .
|
|
|
|
# Generate software database from SQL file
|
|
RUN cd /go/fleet/cmd/osquery-perf/software-library && \
|
|
ls -lh && \
|
|
if [ ! -f software.sql ]; then \
|
|
echo "ERROR: software.sql not found in software-library directory"; \
|
|
exit 1; \
|
|
fi && \
|
|
echo "Generating software.db from software.sql..." && \
|
|
rm -f software.db && \
|
|
sqlite3 software.db < software.sql && \
|
|
if [ ! -f software.db ]; then \
|
|
echo "ERROR: Failed to generate software.db"; \
|
|
exit 1; \
|
|
fi && \
|
|
echo "Validating database..." && \
|
|
sqlite3 software.db "SELECT COUNT(*) FROM software;" && \
|
|
echo "Successfully generated software.db ($(du -h software.db | cut -f1))"
|
|
|
|
FROM alpine:3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
|
|
LABEL maintainer="Fleet Developers"
|
|
|
|
# Create FleetDM group and user
|
|
RUN addgroup -S osquery-perf && adduser -S osquery-perf -G osquery-perf
|
|
|
|
COPY --from=0 /go/fleet/cmd/osquery-perf/osquery-perf /go/osquery-perf
|
|
COPY --from=0 /go/fleet/server/vulnerabilities/testdata/ /go/fleet/server/vulnerabilities/testdata/
|
|
# Copy software database (generated in builder stage)
|
|
COPY --from=0 /go/fleet/cmd/osquery-perf/software-library/ /go/software-library/
|
|
RUN apk update && apk upgrade && apk add --no-cache sqlite-libs
|
|
WORKDIR /go
|
|
USER osquery-perf
|