Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to support 9.3.0 without Cucumber vulnerabilities #163

Draft
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

coty
Copy link
Member

@coty coty commented Feb 21, 2024

This makes several changes to Dockerfile and setup.sh to remove vulnerabilities from the Docker image.

  • Updates Ubuntu to latest LTS release
  • Updates font names to match new Ubuntu
  • Updates Gradle from 5.4.1 to 7.6.4 (this is the most important change for reducing vulnerabilities)
  • Updates Firefox installation to install Firefox rather than just a Span pointer

Changed the base image in the Dockerfile from Ubuntu 20.04 to the latest stable version available.
- Changed font package name for Ubuntu installation to match new naming convention.
- Updated Gradle version from 5.4.1 to 7.6.4 in the setup script for installation via download link.
Added commands to add Mozilla Firefox repository key, source, preferences, and updated the package list before installing Firefox in the setup script.
@@ -1,4 +1,4 @@
FROM ubuntu:20.04
FROM ubuntu:latest
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The team is using ubuntu 20.04 as base version. So can you rollback to 20.04 to avoid some side effect issue. The team will plan to support latest LTS version later

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It was a mistake for me to switch to latest, but I also think it is a mistake for us to sit on 20.04 at this point. How long do you think before we upgrade to the current LTS?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@coty thanks for your reminding

https://wiki.ubuntu.com/Releases
Ubuntu 20.04 LTS - End of Standard Support: [April 2025]
We should upgrade to Ubuntu 22.04.4 LTS - End of Standard Support: [June 2027]

cc @anvantran @trinh-h


echo "Install Mozilla Firefox"
install -d -m 0755 /etc/apt/keyrings
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you explain these code? without it, the docker still download correct Firefox version

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updates Firefox installation to install Firefox rather than just a Span pointer

This might only be relevant with later Ubuntu versions, but in those later versions, apt no longer actually installs Firefox. The change is described here:

https://askubuntu.com/questions/1399383/how-to-install-firefox-as-a-traditional-deb-package-without-snap-in-ubuntu-22

@nghiadhd-2702
Copy link
Collaborator

@HieuBui419
Please inherit this PR and try to upgrade to gradle only. To make sure the docker is compatible with the client system.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants