Skip to content

Commit e889a5e

Browse files
committed
fix: CVE issues in image build
1 parent 79d4b0e commit e889a5e

File tree

1 file changed

+4
-6
lines changed

1 file changed

+4
-6
lines changed

Dockerfile

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,15 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.0.0
15+
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0
1616

17-
# Architecture for bin folder
1817
ARG ARCH
19-
20-
# Copy nfsplugin from build _output directory
21-
COPY bin/${ARCH}/nfsplugin /nfsplugin
18+
ARG binary=./bin/${ARCH}/nfsplugin
19+
COPY ${binary} /nfsplugin
2220

2321
RUN apt update && apt-mark unhold libcap2
2422
RUN clean-install ca-certificates mount nfs-common netbase
2523
# install updated packages to fix CVE issues
26-
RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
24+
RUN clean-install libgmp10 bsdutils libssl1.1 openssl libc6 libc-bin libsystemd0 libudev1
2725

2826
ENTRYPOINT ["/nfsplugin"]

0 commit comments

Comments
 (0)