Skip to content

Commit 996e220

Browse files
committed
chore: Remove unneeded ca-certificates package from Dockerfile
The core functionalities of the maas-api (listing models, creating tokens, supporting authN/authZ) are working properly without the `ca-certificates` package. Thus, removing this package. The main motivation for the removal is compatibility with hermetic Konflux builds which were failing because of the presence of this package. Secondarily, it is always better to not install unneeded packages keeping the image small, and reducing attack surface (if any).
1 parent 870bbff commit 996e220

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

maas-api/Dockerfile

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,6 @@ RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o maas-api ./c
1313

1414
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
1515

16-
# Install CA certificates for HTTPS requests
17-
RUN microdnf install -y ca-certificates && microdnf clean all
18-
1916
WORKDIR /app
2017

2118
COPY --from=builder /app/maas-api .

0 commit comments

Comments
 (0)