paul/picpeak
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Update frontend runtime image to patched libpng
Build and Push Docker Images / build-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details
Build and Push Docker Images / build-backend (push) Has been cancelled
Details

Browse Source
This commit is contained in:
paul
2025-11-28 17:47:24 +01:00
parent 9a75f1c929
commit 97e54355fb
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/Dockerfile
+5 -3
View File
@@ -27,11 +27,13 @@ COPY . .
# Build the application # Build the application
RUN npm run build RUN npm run build
# Production stage # Production stage (use Alpine with patched libpng)
FROM nginx:alpine FROM nginx:1.27-alpine3.21
# Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) # Upgrade all packages to fix security vulnerabilities (BusyBox CVEs)
RUN apk upgrade --no-cache RUN apk upgrade --no-cache
# Ensure libpng includes CVE fixes
RUN apk add --no-cache 'libpng>=1.6.51-r0'
# Install runtime dependencies # Install runtime dependencies
RUN apk add --no-cache curl RUN apk add --no-cache curl
@@ -63,4 +65,4 @@ HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
USER nginx USER nginx
# Start nginx # Start nginx
CMD ["nginx", "-g", "daemon off;"] CMD ["nginx", "-g", "daemon off;"]