8000 Azure Linux 3.0 Distroless images contain `bash` due to SymCrypt update · Issue #6419 · dotnet/dotnet-docker · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Azure Linux 3.0 Distroless images contain bash due to SymCrypt update #6419

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
lbussell opened this issue May 5, 2025 · 0 comments · Fixed by #6442
Closed

Azure Linux 3.0 Distroless images contain bash due to SymCrypt update #6419

lbussell opened this issue May 5, 2025 · 0 comments · Fixed by #6442
Labels
area-dockerfiles

Comments

@lbussell
Copy link
Contributor
lbussell commented May 5, 2025 •
edited
Loading

Azure Linux 3.0 images are failing expected packages tests with the following output:

Example: dotnet/nightly/runtime-deps:9.0-azurelinux3.0-distroless-extra-amd64

 Expected Packages: [ azurelinux-release, distroless-packages-minimal, filesystem, glibc, icu, libgcc, libstdc++, openssl, openssl-libs, prebuilt-ca-certificates, SymCrypt, SymCrypt-OpenSSL, tzdata ]
 Actual Packages: [ SymCrypt, SymCrypt-OpenSSL, acl, attr, azurelinux-release, bash, bzip2-libs, coreutils, distroless-packages-minimal, filesystem, glibc, gmp, grep, icu, libacl, libattr, libcap, libgcc, libpcre2-16-0, libpcre2-32-0, libpcre2-8-0, libpcre2-posix2, libselinux, libsepol, libstdc++, ncurses, ncurses-libs, openssl, openssl-libs, pcre2, pcre2-tools, prebuilt-ca-certificates, readline, tzdata, zlib ]

Of note in this list is bash, which we definitely don't want to blindly allow as a package in our distroless image.

This is currently blocking all builds and PRs.
@github-project-automation github-project-automation bot moved this to Backlog in .NET Docker May 5, 2025
@lbussell lbussell moved this from Backlog to In Progress in .NET Docker May 5, 2025
@lbussell lbussell mentioned this issue May 5, 2025
Merged
@lbussell lbussell changed the title Nightly build failing due to package/dependency changes in Azure Linux 3.0 Azure Linux 3.0 Distroless images contain bash due to SymCrypt update May 12, 2025
@lbussell lbussell moved this from In Progress to Tracking in .NET Docker May 12, 2025
This was referenced May 13, 2025
Merged
6BB0
Merged
@github-project-automation github-project-automation bot moved this from Tracking to Done in .NET Docker May 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area-dockerfiles
Projects
.NET Docker
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Revert "[main] Update package baseline for Azure Linux 3.0" dotnet/dotnet-docker
1 participant
@lbussell
0