Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
rebase-docker-image
Advanced tools
Rebase a dockerized Windows app to a newer Windows Docker base image.
This repo started just for fun to see if it's possible to swap the Windows base images of existing apps on the Docker Hub.
RUN
instructions to 1709. Only COPY
and ENV
seem to be fine.npm install -g rebase-docker-image
C:\> rebase-docker-image -h
Usage: rebase-docker-image src -t target -b base
It also needs two environment variables DOCKER_USER
and DOCKER_PASS
to push the target image.
Let's modernize or update golang from the 10.0.14393.x base image to the 1709 variant.
$ rebase-docker-image \
golang:1.9-nanoserver \
-t stefanscherer/golang-windows:1.9-nanoserver-1709 \
-b microsoft/nanoserver:1709
Let's modernize or update winspector from the 10.0.14393.x base image to the Insider 17035 variant.
$ rebase-docker-image \
stefanscherer/winspector:windows-2.0.0-2016 \
-s microsoft/nanoserver:10.0.14393.1770 \
-t stefanscherer/winspector:insider-17035 \
-b microsoft/nanoserver-insider:10.0.17035.1000
Changing from a different base image repo to another we have to specify with -s
the source base image repo and tag. In this case the two base image layers are replaced by the single insider base image layer.
docker run -it -e DOCKER_USER -e DOCKER_PASS stefanscherer/node-windows:1709 cmd
npm install -g rebase-docker-image
rebase-docker-image -h
docker run -it -e DOCKER_USER -e DOCKER_PASS node bash
npm install -g rebase-docker-image
rebase-docker-image -h
This tool is in an early stage and many things can be improved.
MIT
FAQs
Rebase a Windows Docker image
The npm package rebase-docker-image receives a total of 5 weekly downloads. As such, rebase-docker-image popularity was classified as not popular.
We found that rebase-docker-image demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.