Merge pull request #805 from gsunner/engine-image-cve-fix

Fix for CVE-2018-1000654 in openjdk:8u201-jre-alpine3
SeldonIO · Aug 15, 2019 · 7e84734 · 7e84734
2 parents 12d1bff + 9480bfb
commit 7e84734
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/engine/Dockerfile b/engine/Dockerfile
@@ -1,8 +1,12 @@
-FROM openjdk:8u201-jre-alpine3.9
+FROM openjdk:8u222-jre-slim
 
 ARG APP_VERSION=UNKOWN_VERSION
 
-RUN apk add curl
+RUN \
+    apt-get update -y && \
+    apt-get install -y curl && \
+    apt-get remove -y --auto-remove && \
+    apt-get clean -y && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
 COPY /target/seldon-engine-${APP_VERSION}.jar app.jar
 COPY /target/generated-resources /licenses/