From bc8520067fe31f49527bbff88bf0cbb0945079ef Mon Sep 17 00:00:00 2001 From: Buseong Kim Date: Wed, 16 Sep 2026 11:16:48 +0900 Subject: [PATCH] build(docker): Identify images that preserve admin updates - Mark compatible runtime images with the admin update capability label - Keep the Dockerfile template and both generated Dockerfiles aligned - Let the host updater reject images that would remove the update endpoint --- docker/Dockerfile.alpine | 1 + docker/Dockerfile.debian | 1 + docker/Dockerfile.j2 | 1 + 3 files changed, 3 insertions(+) diff --git a/docker/Dockerfile.alpine b/docker/Dockerfile.alpine index a91deb07..194d961f 100644 --- a/docker/Dockerfile.alpine +++ b/docker/Dockerfile.alpine @@ -128,6 +128,7 @@ RUN . /env-cargo && \ # We need to add `--platform` here, because of a podman bug: https://github.com/containers/buildah/issues/4742 # hadolint ignore=DL3065 FROM --platform=$TARGETPLATFORM docker.io/library/alpine:3.24 +LABEL org.vaultwarden.admin-updates="1" ENV ROCKET_PROFILE="release" \ ROCKET_ADDRESS=0.0.0.0 \ diff --git a/docker/Dockerfile.debian b/docker/Dockerfile.debian index b8490609..c4536d0e 100644 --- a/docker/Dockerfile.debian +++ b/docker/Dockerfile.debian @@ -152,6 +152,7 @@ RUN . /env-cargo && \ # We need to add `--platform` here, because of a podman bug: https://github.com/containers/buildah/issues/4742 # hadolint ignore=DL3065 FROM --platform=$TARGETPLATFORM docker.io/library/debian:trixie-slim +LABEL org.vaultwarden.admin-updates="1" ENV ROCKET_PROFILE="release" \ ROCKET_ADDRESS=0.0.0.0 \ diff --git a/docker/Dockerfile.j2 b/docker/Dockerfile.j2 index 633d6955..b58afd7d 100644 --- a/docker/Dockerfile.j2 +++ b/docker/Dockerfile.j2 @@ -187,6 +187,7 @@ RUN . /env-cargo && \ # We need to add `--platform` here, because of a podman bug: https://github.com/containers/buildah/issues/4742 # hadolint ignore=DL3065 FROM --platform=$TARGETPLATFORM {{ runtime_stage_image[base] }} +LABEL org.vaultwarden.admin-updates="1" ENV ROCKET_PROFILE="release" \ ROCKET_ADDRESS=0.0.0.0 \