Bump alpine version to v3.13 (latest)

[Gabitchov]

I bump the version of alpine to the latest stable, 3.13: https://www.alpinelinux.org/releases/

[grzesuav]

hi @Gabitchov , all dockerfiles are generated from scripts, so the place which needs update is here - https://github.com/AdoptOpenJDK/openjdk-docker/blob/master/dockerfile_functions.sh#L156

[Gabitchov]

hi @Gabitchov , all dockerfiles are generated from scripts, so the place which needs update is here - https://github.com/AdoptOpenJDK/openjdk-docker/blob/master/dockerfile_functions.sh#L156

@grzesuav Thanks for your feedback.
Do I need to generate something or this is enough to update all image? Let me know.

[grzesuav]

Actually images in this repo aren't use in builds - they are for users only. At each run images are regenerated. Dockerfiles in repo are from time to time updated by @dinogun . @dinogun can you confirm ?

[dinogun]

lgtm

[consult-kk]

Hi,
Does this PR bump the Alpine version to 3.13 ? I still see the individual Dockerfiles referencing Alpine 3.12.
If the JRE images ( JRE 13.x ) has been updated to use Alpine 3.13 . How can I reference the updated image .
Thanks,
KK

[Gabitchov]

Hi,
Does this PR bump the Alpine version to 3.13 ? I still see the individual Dockerfiles referencing Alpine 3.12.
If the JRE images ( JRE 13.x ) has been updated to use Alpine 3.13 . How can I reference the updated image .
Thanks,
KK

Hello,

What I understood, there is one build by day on change. The one for this PR is on going: https://ci.adoptopenjdk.net/job/openjdk_build_docker_multiarch/231/

I am also pending for an updated image but for the openjdk11

Wait and see...

[consult-kk]

@Gabitchov - No joy.. I still see alpine 3.12 in all the docker.xxx files
is there a time line on when these will be updated ?

[consult-kk]

Any updates on this. Every version still shows up as using alpine 3.12 . Container Security scanners tools are blocking the older versions due to unresolved CVEs.

[aahlenst]

@consult-kk We reverted back to Alpine 3.12 because of #520. Alpine 3.12 is still supported (= receives security fixes), so the claims of the security scanners sounds dubious.

[consult-kk]

@consult-kk We reverted back to Alpine 3.12 because of #520. Alpine 3.12 is still supported (= receives security fixes), so the claims of the security scanners sounds dubious.

I will put my trust on an image scanner rather than just claiming it to be "dubious" with out any data backing the claim.
Please see below.

[aahlenst]

@consult-kk As you wish, hard data: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/11120. https://gitlab.alpinelinux.org/alpine/aports/-/commit/1d0560a9b6b5597b191e5aff69a31c2fe0aba273 shows which releases it's in.