remove packages

Signed-off-by: zhangzujian <zhangzujian.7@gmail.com>

Author: zhangzujian

dist/images/Dockerfile.base

@@ -170,7 +170,7 @@ RUN mkdir /packages/ && \
     cp /usr/src/python3-openvswitch*deb /packages && \
     cp /usr/src/ovn-*deb /packages && \
     cp /usr/src/ovs/tutorial/ovs-sandbox /packages && \
-    cd /packages && rm -f *source* *doc* *datapath* *docker* *vtep* *test* *dev*
+    cd /packages && rm -f *source* *doc* *datapath* *docker* *vtep* *test* *dev* *ipsec* *pki* **python*
 
 FROM ghcr.io/aquasecurity/trivy:latest AS trivy
 
@@ -199,11 +199,13 @@ ARG ARCH
 ARG DEBIAN_FRONTEND=noninteractive
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
-    apt update && apt upgrade -y && apt install ca-certificates python3 hostname libunwind8 netbase \
-        ethtool iproute2 ncat libunbound8 procps libatomic1 kmod iptables python3-netifaces python3-sortedcontainers \
-        tcpdump ipvsadm ipset curl uuid-runtime openssl inetutils-ping arping ndisc6 conntrack traceroute iputils-tracepath \
-        logrotate dnsutils net-tools strongswan strongswan-pki libcharon-extra-plugins libmnl0 \
-        libcharon-extauth-plugins libstrongswan-extra-plugins libstrongswan-standard-plugins -y --no-install-recommends && \
+    apt update && apt upgrade -y && apt install ca-certificates hostname libunwind8 netbase \
+        ethtool iproute2 ncat libunbound8 procps libatomic1 kmod iptables \
+        tcpdump ipvsadm ipset curl uuid-runtime inetutils-ping arping ndisc6 conntrack traceroute iputils-tracepath \
+        logrotate dnsutils net-tools -y --no-install-recommends && \
+        apt remove --allow-remove-essential -y coreutils login libpam-runtime libpam-modules libpam-modules-bin libpam0g util-linux libkrb5support0 libbpf1 libelf1t64 && \
+        apt autoremove -y && \
+        dpkg -r gpgv && \
         setcap CAP_NET_ADMIN+eip $(readlink -f $(which conntrack)) && \
         setcap CAP_NET_ADMIN+eip $(readlink -f $(which ethtool)) && \
         setcap CAP_NET_ADMIN+eip $(readlink -f $(which ip)) && \
@@ -244,7 +246,7 @@ RUN --mount=type=bind,target=/packages,from=ovs-builder,source=/packages \
     cp /packages/bfdd-beacon /packages/bfdd-control /usr/bin/ && \
     cp /packages/ovs-sandbox /usr/bin/ && chmod +x /usr/bin/ovs-sandbox && \
     setcap CAP_NET_BIND_SERVICE+eip /usr/bin/bfdd-beacon && \
-    dpkg -i /packages/openvswitch-*.deb /packages/python3-openvswitch*.deb && \
+    dpkg -i /packages/openvswitch-*.deb && \
     dpkg -i --ignore-depends=openvswitch-switch,openvswitch-common /packages/ovn-*.deb && \
     rm -rf /var/lib/openvswitch/pki/ && \
     chown -R nobody: /var/lib/logrotate && \