Skip to content

Commit

Permalink
🚑️(frontend) fixe CVEs in backend image
Browse files Browse the repository at this point in the history
Use alpine version for production image instead of debian in order
tohave less CVEs.
  • Loading branch information
rouja authored and mjeammet committed Sep 30, 2024
1 parent 56cee65 commit b7ca524
Showing 1 changed file with 15 additions and 23 deletions.
38 changes: 15 additions & 23 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,15 +1,14 @@
# Django People

# ---- base image to inherit from ----
FROM python:3.10-slim-bullseye as base
FROM python:3.12.6-alpine3.20 as base

# Upgrade pip to its latest release to speed up dependencies installation
RUN python -m pip install --upgrade pip
RUN python -m pip install --upgrade pip setuptools

# Upgrade system packages to install security updates
RUN apt-get update && \
apt-get -y upgrade && \
rm -rf /var/lib/apt/lists/*
RUN apk update && \
apk upgrade

### ---- Front-end dependencies image ----
FROM node:20 as frontend-deps
Expand Down Expand Up @@ -88,11 +87,9 @@ FROM base as link-collector
ARG PEOPLE_STATIC_ROOT=/data/static

# Install libpangocairo & rdfind
RUN apt-get update && \
apt-get install -y \
libpangocairo-1.0-0 \
rdfind && \
rm -rf /var/lib/apt/lists/*
RUN apk add \
pango \
rdfind

# Copy installed python dependencies
COPY --from=back-builder /install /usr/local
Expand All @@ -116,16 +113,13 @@ FROM base as core
ENV PYTHONUNBUFFERED=1

# Install required system libs
RUN apt-get update && \
apt-get install -y \
gettext \
libcairo2 \
libffi-dev \
libgdk-pixbuf2.0-0 \
libpango-1.0-0 \
libpangocairo-1.0-0 \
shared-mime-info && \
rm -rf /var/lib/apt/lists/*
RUN apk add \
gettext \
cairo \
libffi-dev \
gdk-pixbuf \
pango \
shared-mime-info

# Copy entrypoint
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
Expand Down Expand Up @@ -155,9 +149,7 @@ FROM core as backend-development
USER root:root

# Install psql
RUN apt-get update && \
apt-get install -y postgresql-client && \
rm -rf /var/lib/apt/lists/*
RUN apk add postgresql-client

# Uninstall people and re-install it in editable mode along with development
# dependencies
Expand Down

0 comments on commit b7ca524

Please sign in to comment.