question

LouisT-2118 avatar image
0 Votes"
LouisT-2118 asked MayankBargali-MSFT commented

Docker Image Debian 11 Support

Hi, I am just wondering when the Azure Functions Python images will be updated with Debian 11. There is a CVE-2019-18276 vulnerability in Debian 9 and 10, hence my reason for wanted to upgrade. If there is no plans for Debian 11 release, is there anyway to install azure functions runtime on a custom base image?

azure-functions
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MayankBargali-MSFT avatar image
1 Vote"
MayankBargali-MSFT answered MayankBargali-MSFT commented

@LouisT-2118 Azure function docker github repro would be best place to get your query answered. I will also suggest you to post your query in the function docker repro.

AFAIK there is no plan yet but I will check with the team if I can get any update on supporting the Debian 11.
Product team release patched images once the patch is available. But in case if the vulnerability is coming from the base OS images we use and there are no patches available yet then it would remain unpatched with the new image as well.

I do see one open discussion with the Debian 10 and the team is working on and it will be fixed on the next release.

Update 9/8:
There are no plans yet but the team is working on creating the document to provide instructions to build these images on demand locally (the dockerfiles are already in public docker repo so everything would be avaiable but they will provide detailed instructions on how to use the dockerfiles).

Update 9/23:
Building functions base images on demand is published now and you can refer to this wiki for more details.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I see. Thanks Mayank. Will keep eyes peeled for a next release, but please do let me know if there is Debian 11 in the works, as it is known to fix some vulnerabilities in Debian 10.

0 Votes 0 ·

@LouisT-2118 Sure. Once I got the confirmation I will update the thread.

0 Votes 0 ·

@LouisT-2118 Building functions base images on demand is published now and you can refer to [this wiki][3] for more details. I have also updated my answer with this information

0 Votes 0 ·