fork of https://github.com/sourcegraph/zoekt
docker: use Alpine 3.16.4 base image (#554)
To resolve CVEs reported by trivy.
author
Vincent
committer
GitHub
date
(Mar 8, 2023, 3:17 PM +0200)
commit
939eb52f
939eb52f3486c8c9a8200453f3cbe060844db72c
parent
8df0b5af
8df0b5af86f03c88d70f925bbdd58dce50c76401
+3
-4
+2
-3
Dockerfile.indexserver
+2
-3
Dockerfile.indexserver
···
1
-
FROM alpine:3.16.2
1
+
FROM alpine:3.16.4
2
2
3
3
RUN apk update --no-cache && apk upgrade --no-cache && \
4
4
apk add --no-cache ca-certificates bind-tools tini git jansson && \
5
-
apk add --upgrade --no-cache 'libcrypto1.1>=1.1.1n-r0' 'libssl1.1>=1.1.1n-r0' 'pcre2>=10.40-r0'
6
-
5
+
apk add --upgrade --no-cache 'libcrypto1.1>=1.1.1n-r0' 'libssl1.1>=1.1.1n-r0' 'pcre2>=10.40-r0' 'e2fsprogs>=1.46.6-r0'
7
6
# Run as non-root user sourcegraph. External volumes should be mounted under /data (which will be owned by sourcegraph).
8
7
RUN mkdir -p /home/sourcegraph
9
8
RUN addgroup -S sourcegraph && adduser -S -G sourcegraph -h /home/sourcegraph sourcegraph && mkdir -p /data && chown -R sourcegraph:sourcegraph /data