Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

apk: fix package versions #631

Closed
wants to merge 2 commits into from
Closed

Conversation

gdams
Copy link
Member

@gdams gdams commented Aug 13, 2024

I'm experimenting with fixing the installed versions of packages. This would allow us to deploy new updates when packages have CVE fixes.

The idea is to store the packages/versions in a yaml file so that we can then programatically update them easily and regenerate the docker images.

@gdams
Copy link
Member Author

gdams commented Aug 13, 2024

@tianon / @yosifkit I'm keen to get your thoughts on this... Is there any tooling available that I might have missed that could make this simpler?

@tianon
Copy link

tianon commented Aug 13, 2024

Oof, I'm very much not a fan of this -- if any of these packages has even a minor bump, we'll start failing to build until they're updated. If there were a way to make the constraints >= instead of strictly =, I'd be more lukewarm to it, but it's still pretty gross overall. 🙈

@gdams
Copy link
Member Author

gdams commented Aug 14, 2024

Oof, I'm very much not a fan of this -- if any of these packages has even a minor bump, we'll start failing to build until they're updated. If there were a way to make the constraints >= instead of strictly =, I'd be more lukewarm to it, but it's still pretty gross overall. 🙈

Hmm yeah good point, okay I'll hold back on these changes

@gdams gdams closed this Aug 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants