Update run.Dockerfile to create dpkg/info/$pkg.list files (#7)

* Updated run.Dockerfile to address OpenSSL CVE scanning issues

Updated the run.Dockerfile to include dpkg-deb command to create
$pkg.list files

* Updated `metadata_tiny_stack_test.go` to include tests for the newly added list files from the run.Dockerfilefile.

* Delete stacks/noble-tiny-stack/run.Dockerfile

This file shows naming that mentioned the Paketo Buildpacks Full Noble so I believe this file is not needed.

Author: miller79

metadata_tiny_stack_test.go

@@ -118,12 +118,20 @@ func testMetadataTinyStack(t *testing.T, context spec.G, it spec.S) {
 					ContainSubstring("Architecture: arm64")),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/base-files.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/ca-certificates", SatisfyAll(
 				ContainSubstring("Package: ca-certificates"),
 				MatchRegexp("Version: [0-9]+"),
 				ContainSubstring("Architecture: all"),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/ca-certificates.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/libc6", SatisfyAll(
 				ContainSubstring("Package: libc6"),
 				MatchRegexp("Version: [0-9\\.\\-]+ubuntu[0-9\\.]+"),
@@ -132,6 +140,10 @@ func testMetadataTinyStack(t *testing.T, context spec.G, it spec.S) {
 					ContainSubstring("Architecture: arm64")),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/libc6.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/libssl3t64", SatisfyAll(
 				ContainSubstring("Package: libssl3t64"),
 				MatchRegexp("Version: [0-9\\.\\-]+ubuntu[0-9\\.]+"),
@@ -140,12 +152,20 @@ func testMetadataTinyStack(t *testing.T, context spec.G, it spec.S) {
 					ContainSubstring("Architecture: arm64")),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/libssl3t64.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/netbase", SatisfyAll(
 				ContainSubstring("Package: netbase"),
 				MatchRegexp("Version: [0-9\\.]+"),
 				ContainSubstring("Architecture: all"),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/netbase.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/openssl", SatisfyAll(
 				ContainSubstring("Package: openssl"),
 				MatchRegexp("Version: [0-9\\.\\-]+ubuntu[0-9\\.]+"),
@@ -154,12 +174,20 @@ func testMetadataTinyStack(t *testing.T, context spec.G, it spec.S) {
 					ContainSubstring("Architecture: arm64")),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/openssl.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/tzdata", SatisfyAll(
 				ContainSubstring("Package: tzdata"),
 				MatchRegexp("Version: [a-z0-9\\.\\-]+ubuntu[0-9\\.]+"),
 				ContainSubstring("Architecture: all"),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/tzdata.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/status.d/zlib1g", SatisfyAll(
 				ContainSubstring("Package: zlib1g"),
 				MatchRegexp("Version: [a-z0-9\\.\\-\\:]+ubuntu[0-9\\.]+"),
@@ -168,6 +196,10 @@ func testMetadataTinyStack(t *testing.T, context spec.G, it spec.S) {
 					ContainSubstring("Architecture: arm64")),
 			)))
 
+			Expect(image).To(HaveFileWithContent("/var/lib/dpkg/info/zlib1g.list", SatisfyAll(
+				ContainSubstring("/."),
+			)))
+
 			Expect(image).NotTo(HaveFile("/usr/share/ca-certificates"))
 
 			Expect(image).To(HaveFileWithContent("/etc/os-release", SatisfyAll(

stacks/noble-tiny-stack/run.Dockerfile

@@ -15,15 +15,20 @@ ADD files/passwd /tiny/etc/passwd
 ADD files/nsswitch.conf /tiny/etc/nsswitch.conf
 ADD files/group /tiny/etc/group
 
-RUN mkdir -p /tiny/tmp /tiny/var/lib/dpkg/status.d/
+RUN mkdir -p /tiny/tmp /tiny/var/lib/dpkg/status.d/ /tiny/var/lib/dpkg/info/
 
 # We can't use dpkg -i (even with --instdir=/tiny) because we don't want to
 # install the dependencies, and dpkg-deb has no way to ignore all dependencies;
 # each dependency must be explicitly listed
 RUN apt download $packages \
     && for pkg in $packages; do \
       dpkg-deb --field $pkg*.deb > /tiny/var/lib/dpkg/status.d/$pkg \
-      && dpkg-deb --extract $pkg*.deb /tiny; \
+      && dpkg-deb --extract $pkg*.deb /tiny \
+      && dpkg-deb -c $pkg*.deb | \
+        sed -e 's| -> .*||' \
+            -e 's|.* ||p' | \
+        sed -e 's|^\./|/|' \
+            -e 's|^/$|/.|' > /tiny/var/lib/dpkg/info/$pkg.list; \
     done
 
 RUN ./install-certs.sh