From 80a59733bc2914f6043ee4f4b319308a8ae98d52 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Filip=20=C5=9Al=C4=99zak?= Date: Thu, 9 Oct 2025 14:53:42 +0200 Subject: [PATCH 1/3] add debian security repo for main packages --- Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 784c7ee9..8b4475c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -39,8 +39,11 @@ RUN cargo install --locked --path . --root /build # run FROM debian:13-slim AS runtime +RUN echo "deb http://security.debian.org/ trixie-security main" \ + >> /etc/apt/sources.list RUN apt-get update -y && \ - apt-get install --no-install-recommends -y ca-certificates && \ + apt-get upgrade -y +RUN apt-get install --no-install-recommends -y ca-certificates && \ rm -rf /var/lib/apt/lists/* # make sure we run latest patch for openssl and ssl lib RUN apt-get install -y --only-upgrade libssl3t64 openssl && \ From 1767775166aa9d698392e30c6d203e486fc08c11 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Filip=20=C5=9Al=C4=99zak?= Date: Thu, 9 Oct 2025 15:05:57 +0200 Subject: [PATCH 2/3] Update Dockerfile --- Dockerfile | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8b4475c5..af2735ee 100644 --- a/Dockerfile +++ b/Dockerfile @@ -41,12 +41,8 @@ RUN cargo install --locked --path . --root /build FROM debian:13-slim AS runtime RUN echo "deb http://security.debian.org/ trixie-security main" \ >> /etc/apt/sources.list -RUN apt-get update -y && \ - apt-get upgrade -y -RUN apt-get install --no-install-recommends -y ca-certificates && \ - rm -rf /var/lib/apt/lists/* -# make sure we run latest patch for openssl and ssl lib -RUN apt-get install -y --only-upgrade libssl3t64 openssl && \ +RUN apt-get update -y && apt upgrade -y && \ + apt-get install --no-install-recommends -y ca-certificates libssl-dev && \ rm -rf /var/lib/apt/lists/* WORKDIR /app COPY --from=builder /build/bin/defguard-proxy . From b8360c6d944e07696408b8fc2245c636beff5c3a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adam=20Ciarcin=CC=81ski?= Date: Thu, 9 Oct 2025 15:09:28 +0200 Subject: [PATCH 3/3] Remove echo from Dockerfile --- Dockerfile | 2 -- 1 file changed, 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index af2735ee..fd2dab73 100644 --- a/Dockerfile +++ b/Dockerfile @@ -39,8 +39,6 @@ RUN cargo install --locked --path . --root /build # run FROM debian:13-slim AS runtime -RUN echo "deb http://security.debian.org/ trixie-security main" \ - >> /etc/apt/sources.list RUN apt-get update -y && apt upgrade -y && \ apt-get install --no-install-recommends -y ca-certificates libssl-dev && \ rm -rf /var/lib/apt/lists/*