Skip to content

Commit 9633f9a

Browse files
cmickeybg2flyer
authored andcommitted
Clean up the docker configuration files based on trivy feedback
Note that trivy notes errors about missing USER declarations. The final images that are built, pdo_ccf, pdo_services, and pdo_client all have users defined. Signed-off-by: Mic Bowman <[email protected]>
1 parent 1bfecaf commit 9633f9a

File tree

2 files changed

+4
-3
lines changed

2 files changed

+4
-3
lines changed

Diff for: docker/pdo_base.dockerfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ ARG ADD_APT_PKGS=
2727

2828
ENV DEBIAN_FRONTEND "noninteractive"
2929
RUN apt-get update \
30-
&& apt-get install -y -q \
30+
&& apt-get install -y -q --no-install-recommends \
3131
autoconf \
3232
automake \
3333
build-essential \

Diff for: docker/pdo_ccf_base.dockerfile

+3-2
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ ARG ADD_APT_PKGS=
3131

3232
ENV DEBIAN_FRONTEND "noninteractive"
3333
RUN apt-get update \
34-
&& apt-get install -y -q \
34+
&& apt-get install -y -q --no-install-recommends \
3535
libsecp256k1-dev \
3636
lsof \
3737
python \
@@ -46,8 +46,9 @@ RUN apt-get update \
4646
RUN echo "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu ${UBUNTU_NAME} main" >> /etc/apt/sources.list
4747
RUN curl https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add -
4848

49+
4950
RUN apt-get update \
50-
&& apt-get install -y \
51+
&& apt-get install -y --no-install-recommends \
5152
sgx-aesm-service \
5253
libsgx-dcap-ql \
5354
libsgx-urts \

0 commit comments

Comments
 (0)