-
Notifications
You must be signed in to change notification settings - Fork 26
Description
Is your feature request related to a problem? Please describe.
Currently, some of the dependencies necessary to build and run the project are not pinned:
- some of them are installed via
apt-get install
statements in this Dockerfile - some of them are implicitly part of the un-pined base-image we used before [build] pin deps to previous version #769
This means that there is a slight chance that older versions of the master branch may not be easily buildable (ie, check-out a commit, run make image
and be done)
We would like to increase the general reproducibility of the monitoring images, with reproducibility defined as it is possible to check-out an older commit, run make image
and obtain a usable image, for reasonable definitions of an older commit.
Describe the solution you'd like
In addition to pinning Python dependencies, we can start pinning the exact version of the apt packages that we install, as well as pinning the base images we use.
Describe alternatives you've considered
None: the alternative is to continue as we do today.
Additional context
Ideally we pick an option that allows us to easily automate the update dependencies with a tool such as dependabot.