20.10 is not a LTS, so it's more likely to get semi-spurious updates than a LTS version like 20.04 or, say, debian stable.
For most of my non-alpine-based images, I use debian:buster-slim as base, as it's got a fairly stable base and gets quite routinely updated:
$ docker run --rm -it debian:buster-slim bash -c "apt update >dev/null 2>&1 && apt upgrade" Reading package lists... Done Building dependency tree Reading state information... Done Calculating upgrade... Done 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
this image has been upgraded "39 hours ago".. so you have to check 1-2 month later
debian buster-slim f49666103347 39 hours ago 69.2MB
I check for base image updates every day, and it's one of the most oft-updated ones -- hence my preference for using it as "the" base of all others.
20.10 is not a LTS, so it's more likely to get semi-spurious updates than a LTS version like 20.04 or, say, debian stable.
For most of my non-alpine-based images, I use debian:buster-slim as base, as it's got a fairly stable base and gets quite routinely updated: