mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-12-18 11:00:25 +00:00
build: Update packages in release image
This will get updates released after the base image was built. This adds a layer and increase the image size, but significantly reduce the number of CVEs in the resultant image. Signed-off-by: Gert van den Berg <github@mohag.net>
This commit is contained in:
parent
567b7df197
commit
c3d5b78276
@ -2,7 +2,13 @@ ARG SRC_DIR="/go/src/github.com/ceph/ceph-csi/"
|
|||||||
ARG GO_ARCH
|
ARG GO_ARCH
|
||||||
ARG BASE_IMAGE
|
ARG BASE_IMAGE
|
||||||
|
|
||||||
FROM ${BASE_IMAGE} as builder
|
FROM ${BASE_IMAGE} as updated_base
|
||||||
|
|
||||||
|
RUN dnf -y update \
|
||||||
|
&& dnf clean all \
|
||||||
|
&& rm -rf /var/cache/yum
|
||||||
|
|
||||||
|
FROM updated_base as builder
|
||||||
|
|
||||||
LABEL stage="build"
|
LABEL stage="build"
|
||||||
|
|
||||||
@ -28,8 +34,7 @@ RUN ${GOROOT}/bin/go version && ${GOROOT}/bin/go env
|
|||||||
RUN dnf config-manager --disable \
|
RUN dnf config-manager --disable \
|
||||||
tcmu-runner,tcmu-runner-source,tcmu-runner-noarch || true
|
tcmu-runner,tcmu-runner-source,tcmu-runner-noarch || true
|
||||||
|
|
||||||
RUN dnf -y update \
|
RUN dnf -y install --nodocs \
|
||||||
&& dnf -y install --nodocs \
|
|
||||||
librados-devel librbd-devel \
|
librados-devel librbd-devel \
|
||||||
/usr/bin/cc \
|
/usr/bin/cc \
|
||||||
make \
|
make \
|
||||||
@ -56,7 +61,7 @@ COPY . ${SRC_DIR}
|
|||||||
RUN make cephcsi
|
RUN make cephcsi
|
||||||
|
|
||||||
#-- Final container
|
#-- Final container
|
||||||
FROM ${BASE_IMAGE}
|
FROM updated_base
|
||||||
|
|
||||||
ARG SRC_DIR
|
ARG SRC_DIR
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user