The HAproxy docker image we were using is no longer maintained (hasn't been for years), but is built upon Alpine Linux which has a big security leak: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782 The security leak is fixed in this build of the docker image, but we should move to something else (lke Træfik).
6 lines
210 B
Docker
6 lines
210 B
Docker
FROM dockercloud/haproxy:1.6.7
|
|
LABEL maintainer="Sybren A. Stüvel <sybren@blender.studio>"
|
|
|
|
# Fix https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782
|
|
RUN sed 's/root::/root:!:/' -i /etc/shadow
|