Do package definition update on base images before building image to reduce Vulnerability
Rajpratik71 opened this issue · comments
Is this a bug report or feature request?
- Feature Request
Feature Request
What should the feature do:
Update the package definition update on base images before building image to install latest available package.
What would be solved through this feature:
Updating and installing latest package will help to reduce Vulnerability
Does this have an impact on existing features:
This shouldn't as ceph related package will install their required dependencies.
Ceph tracker https://tracker.ceph.com/issues/57933
There are many linux package with known Vulnerability and fixes.
Rebuilding the images now should do a lot better as well - Red Hat rebuilt the base image...