docker: Add missing sqlite library in final stage
What changed, and why it matters
This commit fixes a packaging bug in Core Lightning's official Docker image. A recent Docker refactoring accidentally left out the SQLite database library (libsqlite3-0) from the final runtime image. Without it, the container likely fails to start or cannot use the default SQLite wallet backend. The patch simply adds the missing library back to the list of packages installed in the final Docker stage. There is no evidence in the commit of a security vulnerability, exploit, or malicious change.
Treat as a routine build/packaging fix. Rebuild and republish the Docker image with the corrected Dockerfile. Users relying on the official Docker image for v25.09.1/v25.09.2 should upgrade to the fixed image once available. No security-specific response is indicated by the commit materials.
Security signals we found
No security-relevant code changes
Packaging/dependency fix only
No mention of CVE, vulnerability, exploit, or security issue in commit or title
Evidence from the diff
The Dockerfile’s final stage installs runtime dependencies for Core Lightning. The diff adds libsqlite3-0 to the apt-get install list alongside existing packages such as libpq5. The commit message states this dependency was missing after Docker refactoring in versions v25.09.1 and v25.09.2, and the Changelog-Fixed label confirms it restores functionality. No code logic is changed; this is a dependency restoration in container packaging.
Changed components
Dockerfile final runtime stageCore Lightning Docker imageSQLite backend dependency (libsqlite3-0)Inspect captured patch +2 / −1
diff --git a/Dockerfile b/Dockerfile
index db9e2691..17afe857 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -161,7 +161,8 @@ RUN apt-get update && \
inotify-tools \
socat \
jq \
- libpq5 && \
+ libpq5 \
+ libsqlite3-0 && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
Why this scored 25/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.