From bca9ccb1b387893bbfe3ad9c78bee2eb42e51b55 Mon Sep 17 00:00:00 2001
From: George Wu <jywu@microsoft.com>
Date: Tue, 1 Sep 2020 01:13:02 +0000
Subject: [PATCH] add install sec updates (#4957)

---
 dockerfiles/Dockerfile.jetson   | 5 +++--
 dockerfiles/Dockerfile.openvino | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/dockerfiles/Dockerfile.jetson b/dockerfiles/Dockerfile.jetson
index 9998fa91e2..91b42bc049 100644
--- a/dockerfiles/Dockerfile.jetson
+++ b/dockerfiles/Dockerfile.jetson
@@ -23,8 +23,9 @@ RUN apt update && \
         libpython3.6-dev \
         python3-pip \
         python3-dev \
-	cmake
-
+        cmake \
+        unattended-upgrades
+RUN unattended-upgrade
 RUN pip3 install --upgrade pip
 RUN pip3 install setuptools
 RUN pip3 install wheel pybind11 pytest
diff --git a/dockerfiles/Dockerfile.openvino b/dockerfiles/Dockerfile.openvino
index 1d0c827526..3a358238e1 100644
--- a/dockerfiles/Dockerfile.openvino
+++ b/dockerfiles/Dockerfile.openvino
@@ -26,7 +26,8 @@ ENV LD_LIBRARY_PATH=${INTEL_OPENVINO_DIR}/deployment_tools/inference_engine/exte
 ENV LANG en_US.UTF-8
 
 RUN apt update && \
-    apt -y install apt-transport-https ca-certificates python3 python3-pip zip x11-apps lsb-core wget cpio sudo libboost-python-dev libpng-dev zlib1g-dev git libnuma1 ocl-icd-libopencl1 clinfo libboost-filesystem1.65-dev libboost-thread1.65-dev protobuf-compiler libprotoc-dev autoconf automake libtool libjson-c-dev && \
+    apt -y install apt-transport-https ca-certificates python3 python3-pip zip x11-apps lsb-core wget cpio sudo libboost-python-dev libpng-dev zlib1g-dev git libnuma1 ocl-icd-libopencl1 clinfo libboost-filesystem1.65-dev libboost-thread1.65-dev protobuf-compiler libprotoc-dev autoconf automake libtool libjson-c-dev unattended-upgrades && \
+    unattended-upgrade && \
     rm -rf /var/lib/apt/lists/*  && \
 # Install OpenVINO
     cd ${MY_ROOT} && \
@@ -68,4 +69,4 @@ RUN apt update && \
     cd onnxruntime/cmake/external/onnx && python3 setup.py install && \
     cd ${MY_ROOT}/onnxruntime && ./build.sh --config Release --update --build --parallel --use_openvino ${DEVICE} --build_wheel && \
     pip install build/Linux/Release/dist/*-linux_x86_64.whl && \
-    cd ${MY_ROOT}/ && rm -rf cmake-3.14.3-Linux-x86_64 onnxruntime
\ No newline at end of file
+    cd ${MY_ROOT}/ && rm -rf cmake-3.14.3-Linux-x86_64 onnxruntime