Dockerfile pip install
AtomicFS opened this issue · comments
AtomicFS commented
The Dockerfiles often install packages via pip
, but do not specify the version.
These packages should be probably pinned to the last working version (see when the containers were last build 9elements/packages), or at least to latest version with the same major (see Semantic Versioning).
Problem is being reported by MegaLinter [DOCKERFILE][hadolint].
Consider doing the same for apt-get
: instead of apt-get install <package>
use apt-get install <package>=<version>
AtomicFS commented
Blocked by issues in milestone 1