Dockerfile version bump to 1.9.0 and vulnerability fix.

Signed-off-by: Krithika Kumaravelu <krithikax.kumaravelu@intel.com>

Author: krithikx

dockerfiles/README.md

@@ -35,7 +35,7 @@ in step 2 depending on the particular use case. Configure the required service o
 
 2. Set up the required crypto service(s)
 ```
-    for i in `lspci -D -d :4940| awk '{print $1}'`; do echo “sym;asym “ > /sys/bus/pci/devices/$i/qat/cfg_services;done
+    for i in `lspci -D -d :4940| awk '{print $1}'`; do echo “sym;asym“ > /sys/bus/pci/devices/$i/qat/cfg_services;done
 ```
 
 3. Bring up the QAT devices
@@ -55,13 +55,13 @@ in step 2 depending on the particular use case. Configure the required service o
 
 6. Add QAT group and Permission to the VF devices in the host
 ```
-    chown root.qat /dev/vfio/*
+    chown root:qat /dev/vfio/*
     chmod 660 /dev/vfio/*
 ```
 
 ### Image creation
 
-Docker images can be build using the below command with appropiate image name.
+Docker images can be built using the below command with appropriate image name.
 
 ```
 docker build --build-arg GID=$(getent group qat | cut -d ':' -f 3) -t <docker_image_name> <path-to-dockerfile> --no-cache

dockerfiles/haproxy/Dockerfile

@@ -3,7 +3,7 @@
 #                                                                         \
 #   BSD LICENSE                                                           \
 #                                                                         \
-#   Copyright(c) 2024-2025 Intel Corporation.                                  \
+#   Copyright(c) 2024-2025 Intel Corporation.                             \
 #   All rights reserved.                                                  \
 #                                                                         \
 #   Redistribution and use in source and binary forms, with or without    \
@@ -38,11 +38,11 @@
 ARG UBUNTU_BASE=ubuntu:22.04
 FROM ${UBUNTU_BASE} AS builder
 
-ARG OPENSSL_VERSION="openssl-3.0.15"
+ARG OPENSSL_VERSION="openssl-3.0.16"
 ARG QATLIB_VERSION="24.02.0"
-ARG QAT_ENGINE_VERSION="v1.8.1"
+ARG QAT_ENGINE_VERSION="v1.9.0"
 ARG IPSEC_MB_VERSION="v2.0"
-ARG IPP_CRYPTO_VERSION="v1.0.0"
+ARG IPP_CRYPTO_VERSION="v1.1.0"
 ARG HAPROXY_VERSION="v2.8.0"
 ARG GID
 ENV DEBIAN_FRONTEND=noninteractive
@@ -153,11 +153,14 @@ RUN apt-get purge -y linux-libc-dev
 
 FROM ${UBUNTU_BASE}
 
+RUN apt-get update && \
+    apt-get upgrade -y
+
 COPY --from=builder /usr/local/lib/libqat.so.4.2.0 /usr/lib/
 COPY --from=builder /usr/local/lib/libusdm.so.0.1.0 /usr/lib/
 COPY --from=builder /usr/local/lib/libIPSec_MB.so.2.0.0 /usr/lib/x86_64-linux-gnu/
 COPY --from=builder /usr/local/lib64/libcrypto.so.3 /usr/lib/x86_64-linux-gnu/
-COPY --from=builder /usr/local/lib/libcrypto_mb.so.12.0 /usr/lib/x86_64-linux-gnu/
+COPY --from=builder /usr/local/lib/intel64/libcrypto_mb.so.12.1 /usr/lib/x86_64-linux-gnu/
 COPY --from=builder /usr/local/bin/openssl /usr/bin/
 COPY --from=builder /usr/local/lib64/engines-3/qatengine.so /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so
 COPY --from=builder /etc/group /etc/group

dockerfiles/qat_crypto_base/Dockerfile

@@ -3,7 +3,7 @@
 #                                                                         \
 #   BSD LICENSE                                                           \
 #                                                                         \
-#   Copyright(c) 2024-2025 Intel Corporation.                                  \
+#   Copyright(c) 2024-2025 Intel Corporation.                             \
 #   All rights reserved.                                                  \
 #                                                                         \
 #   Redistribution and use in source and binary forms, with or without    \
@@ -38,11 +38,11 @@
 ARG UBUNTU_BASE=ubuntu:22.04
 FROM ${UBUNTU_BASE} AS builder
 
-ARG OPENSSL_VERSION="openssl-3.0.15"
+ARG OPENSSL_VERSION="openssl-3.0.16"
 ARG QATLIB_VERSION="24.02.0"
-ARG QAT_ENGINE_VERSION="v1.8.1"
+ARG QAT_ENGINE_VERSION="v1.9.0"
 ARG IPSEC_MB_VERSION="v2.0"
-ARG IPP_CRYPTO_VERSION="v1.0.0"
+ARG IPP_CRYPTO_VERSION="v1.1.0"
 ARG GID
 ENV DEBIAN_FRONTEND=noninteractive
 
@@ -138,11 +138,14 @@ RUN apt-get purge -y linux-libc-dev
 
 FROM ${UBUNTU_BASE}
 
+RUN apt-get update && \
+    apt-get upgrade -y
+
 COPY --from=builder /usr/local/lib/libqat.so.4.2.0 /usr/lib/
 COPY --from=builder /usr/local/lib/libusdm.so.0.1.0 /usr/lib/
 COPY --from=builder /usr/local/lib/libIPSec_MB.so.2.0.0  /usr/lib/x86_64-linux-gnu/
 COPY --from=builder /usr/local/lib64/libcrypto.so.3 /usr/lib/x86_64-linux-gnu/
-COPY --from=builder /usr/local/lib/libcrypto_mb.so.12.0 /usr/lib/x86_64-linux-gnu/
+COPY --from=builder /usr/local/lib/intel64/libcrypto_mb.so.12.1 /usr/lib/x86_64-linux-gnu/
 COPY --from=builder /usr/local/bin/openssl /usr/bin/
 COPY --from=builder /usr/local/lib64/engines-3/qatengine.so /usr/lib/x86_64-linux-gnu/engines-3/
 COPY --from=builder /etc/group /etc/group