docker-node
docker-node copied to clipboard
`node:lts-slim` does not include OpenSSL as it is now based on bookworm because of upstream change in `debian:bookworm-slim` image
Environment
- Image Tag: node:lts-bookworm-slim (alias of node:lts-slim)
Expected Behavior
node:lts-bookworm-slim/node:lts-slim has OpenSSL v3 included
Current Behavior
node:lts-bookworm-slim/node:lts-slim does not include any version of OpenSSL
Possible Solution
I'm not sure if this was intentional or expected, I could not find any communication about this.
A solution would be to include OpenSSL v3 in the image (RUN apt-get install -y openssl).
Steps to Reproduce
ldconfig -p | grep ssl
// does not return any match
Additional Information
For people that are using node:lts-slim (and its variants) and depended on OpenSSL to be present, this is an unexpected change. (I guess that most people, like Prisma users, also probably didn't know that they depended on OpenSSL until now, as it was working before, because it was included)
node:lts-bookworm-slim Dockerfile base image is FROM debian:bookworm-slim
https://github.com/nodejs/docker-node/blob/main/18/bookworm-slim/Dockerfile
The official docker image for Debian is where the change comes from
- in bullseye-slim OpenSSL 1.1.1n is mentioned.
- in bookworm-slim OpenSSL is not mentioned.
Same findings on debuerreotype/docker-debian-artifacts repository
- in bullseye-slim
libssl1.1:amd64 1.1.1n-0+deb11u5is mentioned. - in bookworm-slim OpenSSL is not mentioned.
The node:lts-bookworm (alias of node:lts) does not have this issue since it is based on FROM buildpack-deps:bookworm
https://github.com/nodejs/docker-node/blob/main/18/bookworm/Dockerfile
Related issues: https://github.com/nodejs/docker-node/issues/1915 https://github.com/nodejs/docker-node/issues/1916 https://github.com/prisma/prisma/issues/19729