Skip to content

Commit

Permalink
Update Dockerfile-fips
Browse files Browse the repository at this point in the history
  • Loading branch information
phanikumarp authored Dec 20, 2024
1 parent cb20e82 commit 8eaf509
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion docker/ubi8/Dockerfile-fips
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ RUN ln -sf /usr/local/aws-cli/v2/current/bin/aws /usr/local/bin/aws && \
# Install and update security-critical packages
RUN yum -y install git bash curl wget binutils bzip2-libs
RUN yum -y install ca-certificates-2024.2.69_v8.0.303-80.0.el8_10
RUN yum -y remove tar vim vi && \ yum clean all


# CVE FIX , Install specific versions of libraries to avoid vulnerabilities
RUN wget https://tsn.miraclelinux.com/system/files/AXS8/x86_64/UPDATE/RPMS/expat-2.2.5-15.el8_10.x86_64.rpm && \
Expand All @@ -71,6 +71,9 @@ RUN echo '#!/usr/bin/env bash' > /usr/local/bin/hal && \
echo '/opt/halyard/bin/hal "$@"' >> /usr/local/bin/hal && \
chmod +x /usr/local/bin/hal

RUN yum -y remove tar vim vi wget
RUN yum clean all

# Create a user and use it for running the app
RUN adduser spinnaker
USER spinnaker
Expand Down

0 comments on commit 8eaf509

Please sign in to comment.