Are docker official images always rebuilt whenever a newer base image under the same tag, as the child image was based on, is pushed to DockerHub to adopt upstream updates? For example, if an elasticsearch:5.0.0 image is using openjdk:8-jre as base, when a newer openjdk image with same tag (8-jre) is pushed into Docker Hub, will elasticsearch:5.0.0 be rebuilt (ending up having a different digest)?
2
Answers
No.
There is nothing that automatically rebuilds images. It’s up to the image owners to build a new image and push it to Docker Hub if they want an upstream change to be included in their image.
No, that is not something that container registries like DockerHub offer at the moment.
You can, however, integrate a tool such as
renovate
in your source code repository so that you automatically get a PR when the base images used in your Dockerfile change. So if you configure your CI/CD in a certain way, you can seamlessly update your Docker images and deploy them automatically.Documentation reference: https://docs.renovatebot.com/docker/