Update Dockerfile: Cleanup and remove unnecessary commands

This commit is contained in:
Théophile Diot 2024-08-12 13:00:07 +01:00
parent 34e7633d12
commit 2bef98ddb4
No known key found for this signature in database
GPG key ID: FA995104A0BA376A

View file

@ -49,6 +49,9 @@ RUN apk add --no-cache bash unzip libgcc libstdc++ libpq openssl libmagic mariad
RUN apk add --no-cache "busybox>=1.36.1-r17" "busybox-binsh>=1.36.1-r17" "ssl_client>=1.36.1-r17" # CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVE-2023-42366
RUN apk add --no-cache "libcrypto3>=3.1.6-r0" "libssl3>=3.1.6-r0" "openssl>=3.1.6-r0" # CVE-2024-4741 CVE-2024-5535
# Cleanup
RUN rm -rf /var/cache/apk/*
# Copy dependencies
COPY --from=builder --chown=0:101 /usr/share/bunkerweb /usr/share/bunkerweb
@ -69,8 +72,6 @@ RUN cp helpers/bwcli /usr/bin/ && \
chmod 750 cli/main.py gen/*.py scheduler/main.py scheduler/entrypoint.sh helpers/*.sh deps/python/bin/* /usr/bin/bwcli && \
chmod 660 INTEGRATION
# Cleanup
RUN rm -rf /var/cache/apk/*
COPY --chown=root:scheduler --chmod=770 src/bw/misc/asn.mmdb /var/tmp/bunkerweb/asn.mmdb
COPY --chown=root:scheduler --chmod=770 src/bw/misc/country.mmdb /var/tmp/bunkerweb/country.mmdb