none
Update windows containers RRS feed

  • Question

  • hi,

    i got a question about windows updates for containers. let's assume I'm using windows server 2019 with 2019 containers.

    if i run ( in the shell or in my docker file) :

    docker pull mcr.microsoft.com/windows/servercore:ltsc2019

    I'll get the latest version of windows 2019 container , now let's say after a week there is a new version with some windows update. assuming if still have the old image on my computer - will it download the entire image or only the updated delta.

    in other words : is windows updates are installed as a separate layer , or are they applied as part of the basic layer ?

    Sunday, January 27, 2019 1:53 PM

All replies

  • It will be different image next month but tagged the same way `ltsc2019`, if you need specific version of the image then you need to bind to KB tag instead of `ltsc2019`. 
    Sunday, January 27, 2019 11:19 PM
  • so if I'll do another pull next month, i will need to download the entire container again? even tough i have an older version on my server
    Monday, January 28, 2019 7:10 AM
  • No. You will pull only update on top of base image. Command below will show what your current image consists of. Example below showing current ltsc2019 contains of 3 layers. Second layer is current month update. So this is the layer you will pull next month but base layer will stay the same.


    PS C:\Users\gregory> docker history 681
    IMAGE               CREATED             CREATED BY                                     
     SIZE                COMMENT
    681c097fee48        6 weeks ago         cmd /S /C #(nop)  ENV COMPLUS_NGenProtectedP…   41kB
    <missing>           7 weeks ago         Install update ltsc2019_amd64                   667MB
    <missing>           4 months ago        Apply image 1809_RTM_amd64                      3.47GB



    Monday, January 28, 2019 12:37 PM
  • what is the third layer?

    when is ran this command on one of my lstc2019 images i only got two lines:

    PS C:\build> docker history 8b79
    IMAGE               CREATED             CREATED BY                      SIZE                COMMENT
    8b79386f6e3b        3 weeks ago         Install update ltsc2019_amd64   696MB
    <missing>           4 months ago        Apply image 1809_RTM_amd64      3.47GB

    i understand the point about the base layer , but what I'm missing is the updates.

    is each new update is a new layer ? is this layer consists of the changes form the last update or the changes from the base image?

    Tuesday, January 29, 2019 2:16 PM
  • You have base layer and update layer which changes every month. It's cumulative update (the same way as real OS doing it)
    Tuesday, January 29, 2019 3:08 PM
  • in a real OS when i'm running an update i only download the updates that were released since my last update.

    in this case i get a layer with all the update since the base layer , which is much bigger.

    this mean that potentially for ltsc2019 (that should have support for 5 year) i can have a huge update layer in 2-3 years.

    Tuesday, January 29, 2019 4:18 PM
  • Correct update layer will get bigger as time goes on but you only will have single layer of update. See below for ltsc2016 as example. 

    PS C:\Users\gregory> docker history ea9
    IMAGE               CREATED             CREATED BY                       SIZE                COMMENT
    ea9f7aa13d03        2 weeks ago         Install update 10.0.14393.2724   3.31GB
    <missing>           4 months ago        Apply image 10.0.14393.0         7.68GB

    • Proposed as answer by Algotec IT Wednesday, January 30, 2019 9:36 AM
    Tuesday, January 29, 2019 4:22 PM