From b96f29fc267d472a1f7ac3a114995071dfa7466c Mon Sep 17 00:00:00 2001 From: Yury Semikhatsky Date: Wed, 11 Nov 2026 09:12:06 -0800 Subject: [PATCH 1/2] fix(docker): upgrade base image packages during the build References: https://github.com/microsoft/playwright/issues/44055 --- utils/docker/Dockerfile.jammy | 2 ++ utils/docker/Dockerfile.noble | 2 ++ utils/docker/Dockerfile.resolute | 2 ++ 3 files changed, 6 insertions(+) diff --git a/utils/docker/Dockerfile.jammy b/utils/docker/Dockerfile.jammy index 003d8c798..33157f2eb 100644 --- a/utils/docker/Dockerfile.jammy +++ b/utils/docker/Dockerfile.jammy @@ -15,6 +15,8 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ find /etc/apt -type f \( -name '*.list' -o -name '*.sources' \) \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ + # Pick up security fixes that the base image does not have yet. + apt-get upgrade -y -o Acquire::Retries=0 && \ # Install Python apt-get install -y python3 python3-distutils curl && \ update-alternatives --install /usr/bin/python python /usr/bin/python3 1 && \ diff --git a/utils/docker/Dockerfile.noble b/utils/docker/Dockerfile.noble index 699a624ba..92438a2bc 100644 --- a/utils/docker/Dockerfile.noble +++ b/utils/docker/Dockerfile.noble @@ -15,6 +15,8 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ find /etc/apt -type f \( -name '*.list' -o -name '*.sources' \) \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ + # Pick up security fixes that the base image does not have yet. + apt-get upgrade -y -o Acquire::Retries=0 && \ # Install Python apt-get install -y python3 curl && \ # Align with upstream Python image and don't be externally managed: diff --git a/utils/docker/Dockerfile.resolute b/utils/docker/Dockerfile.resolute index 3c8b64eef..ea7dcde34 100644 --- a/utils/docker/Dockerfile.resolute +++ b/utils/docker/Dockerfile.resolute @@ -15,6 +15,8 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ find /etc/apt -type f \( -name '*.list' -o -name '*.sources' \) \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ + # Pick up security fixes that the base image does not have yet. + apt-get upgrade -y -o Acquire::Retries=0 && \ # Install Python apt-get install -y python3 curl && \ # Align with upstream Python image and don't be externally managed: From 1fe2ab29b9322688e41abec0f713f3c820ce5f1c Mon Sep 17 00:00:00 2001 From: Yury Semikhatsky Date: Wed, 11 Nov 2026 10:01:50 -0800 Subject: [PATCH 2/2] chore(docker): drop Acquire::Retries=0 from the upgrade step --- utils/docker/Dockerfile.jammy | 2 +- utils/docker/Dockerfile.noble | 2 +- utils/docker/Dockerfile.resolute | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/utils/docker/Dockerfile.jammy b/utils/docker/Dockerfile.jammy index 33157f2eb..a2428c1d9 100644 --- a/utils/docker/Dockerfile.jammy +++ b/utils/docker/Dockerfile.jammy @@ -16,7 +16,7 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ # Pick up security fixes that the base image does not have yet. - apt-get upgrade -y -o Acquire::Retries=0 && \ + apt-get upgrade -y && \ # Install Python apt-get install -y python3 python3-distutils curl && \ update-alternatives --install /usr/bin/python python /usr/bin/python3 1 && \ diff --git a/utils/docker/Dockerfile.noble b/utils/docker/Dockerfile.noble index 92438a2bc..fcd686bf2 100644 --- a/utils/docker/Dockerfile.noble +++ b/utils/docker/Dockerfile.noble @@ -16,7 +16,7 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ # Pick up security fixes that the base image does not have yet. - apt-get upgrade -y -o Acquire::Retries=0 && \ + apt-get upgrade -y && \ # Install Python apt-get install -y python3 curl && \ # Align with upstream Python image and don't be externally managed: diff --git a/utils/docker/Dockerfile.resolute b/utils/docker/Dockerfile.resolute index ea7dcde34..c8911634e 100644 --- a/utils/docker/Dockerfile.resolute +++ b/utils/docker/Dockerfile.resolute @@ -16,7 +16,7 @@ RUN --mount=type=secret,id=pipconf,target=/etc/pip.conf,required=false \ -exec sed -i "s|http://archive.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}archive.ubuntu.com|g; s|http://ports.ubuntu.com|http://${UBUNTU_MIRROR_PREFIX}ports.ubuntu.com|g" {} + && \ apt-get update && \ # Pick up security fixes that the base image does not have yet. - apt-get upgrade -y -o Acquire::Retries=0 && \ + apt-get upgrade -y && \ # Install Python apt-get install -y python3 curl && \ # Align with upstream Python image and don't be externally managed: