allinone: want ability to upgrade base container

[dhalperi]

Scenario:

• batfish container has no security issues
• allinone container, because it uses libc and other things like that, has security issues

Do not want to cut a new release (new Java), but rather re-release (and overwrite? bump? existing tag) allinone container only(?)

[dhalperi]

https://buildkite.com/batfish/batfish-vulnerability-scan/builds/721#387ca25c-414d-42d7-9c80-ea33dded1ed1

[dhalperi]

Maybe, for current latest=2022.03.16.1242 we would generate tag 2022.03.16.<new build number and then overwrite latest with it.

[dhalperi]

One manual hack is something like this:

cat allinone-upgrade.dockerfile

FROM batfish/allinone:<version>

RUN apt-get update \
    && apt-get upgrade -y \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* \
    && pip3 install --upgrade pillow

and then push this as latest or version. Iterated, however, this will result in a growing container as each time you do this it adds a new layer.