Loosely pin the alpine dependencies

client/Dockerfile

@@ -2,11 +2,11 @@ ARG REPO=library
 # Build mole for all arch
 FROM golang:1.12-alpine AS builder
 
-ENV MOLE_VERSION=0.4.0
-
-RUN apk add --no-cache git=2.22.0-r0 curl=7.66.0-r0 tar=1.32-r0
+RUN apk add --no-cache git~=2.24 curl~=7.67 tar~=1.32
 
 RUN mkdir /app
+
+ENV MOLE_VERSION=0.4.0
 RUN curl -L "https://github.com/davrodpin/mole/archive/v${MOLE_VERSION}.tar.gz" | tar zx -C /app
 WORKDIR /app/mole-${MOLE_VERSION}
 

server/Dockerfile

@@ -5,7 +5,7 @@ FROM ${REPO}/alpine:3.9
 COPY --from=qemu-user-static /usr/bin/qemu-* /usr/bin/
 
 # Install SSH and set up basic config
-RUN apk add --no-cache openssh-server=7.9_p1-r6 augeas=1.11.0-r0
+RUN apk add --no-cache openssh-server~=7.9 augeas~=1.11
 
 # Create sshd configs
 RUN mkdir /var/run/sshd