revert: Revert Manual NPM Linux Dockerfile Package Installations (libsystemd0, libudev1, libpam-modules, libpam-modules-bin, libpam-runtime, libpam0g) #3928
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR reverts the manual installation of specific versions of system packages (libsystemd0, libudev1, libpam-modules, libpam-modules-bin, libpam-runtime, libpam0g) from the NPM Linux Dockerfile. The manual installations were previously added to address CVEs in the Ubuntu base image, but are no longer needed since Ubuntu has been patched to resolve these security vulnerabilities.
- Removes explicit version pinning for 6 system packages that were manually installed
- Simplifies the RUN command to only install essential packages (iptables, ipset, ca-certificates)
- Reduces maintenance overhead by relying on the updated Ubuntu base image packages
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
Contributor
Author
|
/azp run Azure Container Networking PR, NPM Scale Test, NPM Conformance Tests |
|
Azure Pipelines successfully started running 3 pipeline(s). |
nairashu
approved these changes
Aug 13, 2025
vakalapa
approved these changes
Aug 13, 2025
Contributor
Author
NihaNallappagari
pushed a commit
to NihaNallappagari/azure-container-networking
that referenced
this pull request
Sep 4, 2025
…systemd0, libudev1, libpam-modules, libpam-modules-bin, libpam-runtime, libpam0g) (Azure#3928) removed manual package installations
sivakami-projects
pushed a commit
that referenced
this pull request
Oct 23, 2025
…systemd0, libudev1, libpam-modules, libpam-modules-bin, libpam-runtime, libpam0g) (#3928) removed manual package installations
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Reason for Change:
Reverts manual package installations made to the NPM Linux dockerfile for
libsystemd0, libudev1, libpam-modules, libpam-modules-bin, libpam-runtime, libpam0g. These changes were made as NPM base image (Ubuntu) did not have the updated packages installed which lead to CVEs on the base image. Ubuntu has since been patched to have the CVEs resolved so there is no need to manually install the packages at a specific version.Issue Fixed:
Requirements:
Notes: