fix: remove unused packages to fix CVEs

andyzhangx · Sep 3, 2023 · 911dd78 · 911dd78
1 parent 7bc1087
commit 911dd78
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cmd/smbplugin/Dockerfile b/cmd/smbplugin/Dockerfile
@@ -15,6 +15,8 @@
 FROM registry.k8s.io/build-image/debian-base:bullseye-v1.4.3
 
 RUN apt update && apt upgrade -y && apt-mark unhold libcap2 && clean-install ca-certificates cifs-utils util-linux e2fsprogs mount udev xfsprogs
+# remove unused packages which have CVEs
+RUN apt remove python3.9-minimal libcap2 libldap-2.4-2 libncursesw6 libsqlite3-0 libpython3.9-minimal libwbclient0 -y
 
 LABEL maintainers="andyzhangx"
 LABEL description="SMB CSI Driver"