build(DOCKER): add backports, pin dependencies

niallbyrne-ca · Nov 17, 2023 · bcc4422 · bcc4422
1 parent 16a6627
commit bcc4422
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 4 deletions.
diff --git a/.vale/Vocab/smtp/accept.txt b/.vale/Vocab/smtp/accept.txt
@@ -1,4 +1,5 @@
 aws|AWS
+backports
 certbot
 cloudflare|Cloudflare
 dockerhub|DockerHub

diff --git a/Dockerfile b/Dockerfile
@@ -16,11 +16,15 @@ RUN mkdir -p certbot /usr/local/share/certs/providers /usr/local/share/certs/scr
 COPY providers/"${PROVIDER}".bash /usr/local/share/certs/providers
 COPY scripts/*.bash /usr/local/share/certs/scripts
 
+# Add Backports
+RUN printf "deb http://httpredir.debian.org/debian bullseye-backports main\ndeb-src http://httpredir.debian.org/debian bullseye-backports main" \
+              > /etc/apt/sources.list.d/backports.list
+
 RUN apt-get update                                              \
       &&                                                        \
     apt-get install -y --no-install-recommends                  \
-    certbot                                                     \
-    jq                                                          \
+    certbot=1.*                                                 \
+    jq=1.*                                                      \
       &&                                                        \
     bash -c "                                                   \
       source /usr/local/share/certs/providers/${PROVIDER}.bash  \

diff --git a/providers/aws.bash b/providers/aws.bash
@@ -5,7 +5,9 @@ provider_create() {
 }
 
 provider_dependencies() {
-  apt-get install -y --no-install-recommends awscli python3-certbot-dns-route53
+  apt-get install -y --no-install-recommends \
+    awscli=1.* \
+    python3-certbot-dns-route53=1.*
 }
 
 provider_dkim() {

diff --git a/providers/cloudflare.bash b/providers/cloudflare.bash
@@ -6,7 +6,10 @@ provider_create() {
 }
 
 provider_dependencies() {
-  apt-get install -y --no-install-recommends curl python3-certbot-dns-cloudflare
+  apt-get install -y --no-install-recommends \
+    curl=7.88.* \
+    libcurl4=7.88.* \
+    python3-certbot-dns-cloudflare=1.*
 }
 
 provider_dkim() {