Hi, I’m a Docker newbie and I’m wondering how to go about updating a piece of software that’s held in a container.
Basically, I have a single Ubuntu 16.04 server that’s running Docker currently, which is providing a Netboot service for a small estate of Mac computers. I’ve pulled bruienne/bsdpy to act as the BSDP server and it’s working perfectly, and was simple to set up (go Docker!)
My issue is that bsdpy contains an instance of nginx, and our vulnerability scans have identified that it’s an older version (1.9, latest version is 1.13) and I’ve been asked to patch this as soon as possible. I’m just a little confused as to how Docker would handle this.
As far as I can see, the dockerfile (see here) for bsdpy contains the below:
RUN apt-get install -y -qq nginx tftpd-hpa nfs-common inotify-tools
So I would expect that it’s pulling the latest version of nginx when the docker image gets pulled, however even if I re-run the pull command, stop the container and start it again and re-run the vulnerability scan, it’s still identifying the old version of nginx. Is this not the case?
Can someone please point me in the right direction on how I’d get this updated to the latest version?