.NET 6 images are based on Debian Bullseye. Bullseye will go out of support ahead of .NET 6. We should start producing Debian Bookworm images for .NET 6. Also, OpenSSL 1.x EOL is before .NET 6 EOL. Debian Bullseye includes OpenSSL 1.x and Bookworm 3.x.
- OpenSSL 1.1.1 EOL: September 11, 2023
- Debian Bullseye EOL: ~ July, 2024
- .NET 6 EOL: November 12, 2024
The expectation is the following:
6.0-bullseye-slim tags will be updated through .NET 6 EOL, based on Debian Bullseye.
6.0 tags will continue to be based on bullseye-slim images for compatibility reasons, even though they may have more CVEs.
6.0-bookworm-slim tags will be based on Debian Bookworm and be opt-in (AKA, you need to update your FROM statement).
- We will start by publishing
6.0-bookwork-slim tags in dotnet/nightly repos and then publish to dotnet (main) repos after Bookworm is GA.
6.0 images:
|
FROM arm64v8/debian:bullseye-slim |
.NET 8 images are already based on Bookworm:
|
FROM arm64v8/debian:bookworm-slim |
.NET 7 images don't need to be changed since .NET 7 EOL is ahead of Bullseye or OpenSSL 1.x EOL.
More info:
.NET 6 images are based on Debian Bullseye. Bullseye will go out of support ahead of .NET 6. We should start producing Debian Bookworm images for .NET 6. Also, OpenSSL 1.x EOL is before .NET 6 EOL. Debian Bullseye includes OpenSSL 1.x and Bookworm 3.x.
The expectation is the following:
6.0-bullseye-slimtags will be updated through .NET 6 EOL, based on Debian Bullseye.6.0tags will continue to be based onbullseye-slimimages for compatibility reasons, even though they may have more CVEs.6.0-bookworm-slimtags will be based on Debian Bookworm and be opt-in (AKA, you need to update yourFROMstatement).6.0-bookwork-slimtags indotnet/nightlyrepos and then publish todotnet(main) repos after Bookworm is GA.6.0 images:
dotnet-docker/src/runtime-deps/6.0/bullseye-slim/arm64v8/Dockerfile
Line 1 in f4786b8
.NET 8 images are already based on Bookworm:
dotnet-docker/src/runtime-deps/8.0/bookworm-slim/arm64v8/Dockerfile
Line 1 in f4786b8
.NET 7 images don't need to be changed since .NET 7 EOL is ahead of Bullseye or OpenSSL 1.x EOL.
More info: