Pin versions in
apt get install DOK-DL3008
Bug risk
5 months ago
—
5 months old
Pin versions in apt get install. Instead of
apt-get install <package> use apt-get install <package>=<version>54ENV DEBIAN_FRONTEND noninteractive
55ENV DEBCONF_NOWARNINGS="yes"
56
57RUN apt-get update \58 && apt-get install -yq --no-install-recommends build-essential curl \
59 && rm -rf /var/lib/apt/lists/* /usr/share/doc /usr/share/man \
60 && apt-get clean \
Description
Version pinning forces the build to retrieve a particular version regardless of what’s in the cache. This technique can also reduce failures due to unanticipated changes between versions of dependencies.
You can read more about version pinning here
Bad Practice
FROM debian:buster
RUN apt-get install python
Recommended
FROM debian:buster
RUN apt-get install python=2.7