Skip to content

Commit

Permalink
🚑️(backend) fixe CVEs in backend image
Browse files Browse the repository at this point in the history
Use alpine version for production image instead of debian in order
to have less CVEs.
  • Loading branch information
rouja authored and mjeammet committed Sep 30, 2024
1 parent 27e1bd5 commit fd9a1ec
Showing 1 changed file with 15 additions and 23 deletions.
38 changes: 15 additions & 23 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,15 +1,14 @@
# Django People

# ---- base image to inherit from ----
FROM python:3.10-slim-bullseye as base
FROM python:3.12.6-alpine3.20 as base

# Upgrade pip to its latest release to speed up dependencies installation
RUN python -m pip install --upgrade pip
RUN python -m pip install --upgrade pip setuptools

# Upgrade system packages to install security updates
RUN apt-get update && \
apt-get -y upgrade && \
rm -rf /var/lib/apt/lists/*
RUN apk update && \
apk upgrade

### ---- Front-end dependencies image ----
FROM node:20 as frontend-deps
Expand Down Expand Up @@ -88,11 +87,9 @@ FROM base as link-collector
ARG PEOPLE_STATIC_ROOT=/data/static

# Install libpangocairo & rdfind
RUN apt-get update && \
apt-get install -y \
libpangocairo-1.0-0 \
rdfind && \
rm -rf /var/lib/apt/lists/*
RUN apk add \
pango \
rdfind

# Copy installed python dependencies
COPY --from=back-builder /install /usr/local
Expand All @@ -116,16 +113,13 @@ FROM base as core
ENV PYTHONUNBUFFERED=1

# Install required system libs
RUN apt-get update && \
apt-get install -y \
gettext \
libcairo2 \
libffi-dev \
libgdk-pixbuf2.0-0 \
libpango-1.0-0 \
libpangocairo-1.0-0 \
shared-mime-info && \
rm -rf /var/lib/apt/lists/*
RUN apk add \
gettext \
cairo \
libffi-dev \
gdk-pixbuf \
pango \
shared-mime-info

# Copy entrypoint
COPY ./docker/files/usr/local/bin/entrypoint /usr/local/bin/entrypoint
Expand Down Expand Up @@ -155,9 +149,7 @@ FROM core as backend-development
USER root:root

# Install psql
RUN apt-get update && \
apt-get install -y postgresql-client && \
rm -rf /var/lib/apt/lists/*
RUN apk add postgresql-client

# Uninstall people and re-install it in editable mode along with development
# dependencies
Expand Down

0 comments on commit fd9a1ec

Please sign in to comment.