From bb805013ad41b634c639a410ac35c043eac0acd8 Mon Sep 17 00:00:00 2001 From: Vadim Gusev Date: Wed, 9 Apr 2025 20:03:24 +0300 Subject: [PATCH 1/3] refactor dockerfile --- Dockerfile | 19 ++++++------------- service.yaml | 2 +- 2 files changed, 7 insertions(+), 14 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1b0e779..39449b6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,26 +1,19 @@ -#moving to ubuntu instead of debian to solve high vulnerabilities -FROM ubuntu:noble-20240605 +FROM debian:bookworm-20250407-slim RUN apt-get update && \ - apt-get install -y curl bash openssl git && \ - apt-get clean + apt-get install -y curl bash openssl git && \ + apt-get clean RUN curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash && \ apt-get install git-lfs=3.5.1 && \ git lfs install -#installing busybox -ARG BUSYBOX_VERSION=1:1.36.1-6ubuntu3 - -RUN apt-get install busybox=${BUSYBOX_VERSION} && \ - ln -s /bin/busybox /usr/bin/[[ - -COPY ./start.sh /run/start.sh -RUN chmod +x /run/start.sh - # USER nodeuser RUN addgroup --gid 3000 nodegroup \ && adduser --uid 3000 --home /home/nodeuser --ingroup nodegroup --shell /bin/sh --gecos "" --disabled-password nodeuser USER nodeuser +COPY ./start.sh /run/start.sh +RUN chmod +x /run/start.sh + CMD ["/run/start.sh"] diff --git a/service.yaml b/service.yaml index 498c1b4..033cff2 100644 --- a/service.yaml +++ b/service.yaml @@ -1 +1 @@ -version: 10.2.0 +version: 10.3.0 From cb3dbe69a87107010edd3d21d243563c04a7329e Mon Sep 17 00:00:00 2001 From: Vadim Gusev Date: Wed, 9 Apr 2025 20:07:29 +0300 Subject: [PATCH 2/3] refactor dockerfile --- Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 39449b6..57eddca 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,6 @@ RUN addgroup --gid 3000 nodegroup \ && adduser --uid 3000 --home /home/nodeuser --ingroup nodegroup --shell /bin/sh --gecos "" --disabled-password nodeuser USER nodeuser -COPY ./start.sh /run/start.sh -RUN chmod +x /run/start.sh +COPY --chown=nodeuser:nodeuser --chmod=755 ./start.sh /run/start.sh CMD ["/run/start.sh"] From 852972d136ea8f8babd6b6eed5bfe86ac47eedf5 Mon Sep 17 00:00:00 2001 From: Vadim Gusev Date: Wed, 9 Apr 2025 20:07:59 +0300 Subject: [PATCH 3/3] refactor dockerfile --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index 57eddca..33144b6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,6 +6,7 @@ RUN apt-get update && \ RUN curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash && \ apt-get install git-lfs=3.5.1 && \ + apt-get clean && \ git lfs install # USER nodeuser