Skip to content

Conversation

@joshua-clayton
Copy link

The Dockerfile has gotten pretty stale, and as a base for build images,
leaves a lot of CVEs and vulnerabilities which are easily fixed by moving to a more recent base.

Update it to the most recent Ubuntu LTS.

I'm not sure if there is a more recent version of the dotnet image, but it seemed simpler to
me to follow the installation instructions for action-runner in the Dockerfile.

Lastly, I added apt-get upgrade to the beginning of each apt command,
which will keep the image up to date with the source image if it is rebuilt,
and apt-get clean to the end of each apt command, which will keep the resultant
layers smaller by removing apt download cache leftovers

@joshua-clayton joshua-clayton requested a review from a team as a code owner March 27, 2025 18:14
@joshua-clayton
Copy link
Author

joshua-clayton commented Mar 27, 2025

Also, I don't know if your test suite will cover the Dockerfile, but I can confirm that I am using the above as a base for my self hosted runner. So its building and running with the github api. The only change I had to make to a downstream Dockerimage was to add "--break-system-packages" to the subsequent pip3 command in my local build image

@gthomson31
Copy link

Thanks for this Joshua - hopefully they update it soon

@joshua-clayton
Copy link
Author

While waiting for review, I'm updating the dependencies to reflect releases since march. Once this is accepted, the internal github dependencies will be kept up to date by Github's own release process, but while I'm waiting for this to be merged, I need to keep my forked copy up to date.

@joshua-clayton
Copy link
Author

@TingluoHuang I'd love to get this upgrade merged. Any objection to moving to Ubuntu 24.04?

&& rm -rf /var/lib/apt/lists/*

# Configure git-core/ppa based on guidance here: https://git-scm.com/download/linux
RUN add-apt-repository ppa:git-core/ppa \
Copy link

@marcispauls marcispauls Jun 4, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

combine together with previous run not to make extra layer + i don't see any reasoning to add extra repo just to get upstream git version

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't have a problem with this, but I can see the utility in always making sure the git version is up-to-date, even as the LTS image starts to age. Are you sure?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also fair to mention that the change you request has nothing to do with the changes I made.

In addition to cleaning up the apt lists, remove downloaded packages
This will reduce the size of the layers by a litte bit
Update from Jammy to Noble.
Add the dotnet runtime dependencies to Dockerfile
Use a BASE_IMAGE ARG
Update ImageOS to ubuntu24
Update github and docker dependencies.
Fill in missing linux dependency version ARGS
@gthomson31
Copy link

Is there any plans to merge ?

@rohit-dimagi
Copy link

It's been a while. any update on this would be helpful.

@endersonmenezes
Copy link

cc to watch! 💚

@VladFCarsDevops
Copy link

Any update on this??

frezbo added a commit to frezbo/build-container that referenced this pull request Oct 16, 2025
Use ubuntu 25.10 as base and re-build the runner upstream image with our custom changes to get latest qemu version.
Upstream uses Ubuntu 22.04 which is super see.

See: github.com/actions/runner/pull/3771

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/build-container that referenced this pull request Oct 16, 2025
Use ubuntu 25.10 as base and re-build the runner upstream image with our custom changes to get latest qemu version.
Upstream uses Ubuntu 22.04 which is super see.

See: github.com/actions/runner/pull/3771

Signed-off-by: Noel Georgi <[email protected]>
frezbo added a commit to frezbo/build-container that referenced this pull request Oct 16, 2025
Use ubuntu 25.10 as base and re-build the runner upstream image with our custom changes to get latest qemu version.
Upstream uses Ubuntu 22.04 which is super see.

See: github.com/actions/runner/pull/3771

Signed-off-by: Noel Georgi <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants