Skip to content

Commit 2c1585f

Browse files
committed
Clean up the docker configuration files based on trivy feedback
Note that trivy notes errors about missing USER declarations. The final images that are built, pdo_ccf, pdo_services, and pdo_client all have users defined. Signed-off-by: Mic Bowman <mic.bowman@intel.com>
1 parent c508339 commit 2c1585f

File tree

2 files changed

+4
-3
lines changed

2 files changed

+4
-3
lines changed

docker/pdo_base.dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ ARG ADD_APT_PKGS=
2727

2828
ENV DEBIAN_FRONTEND "noninteractive"
2929
RUN apt-get update \
30-
&& apt-get install -y -q \
30+
&& apt-get install -y -q --no-install-recommends \
3131
autoconf \
3232
automake \
3333
build-essential \

docker/pdo_ccf_base.dockerfile

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ ARG ADD_APT_PKGS=
3131

3232
ENV DEBIAN_FRONTEND "noninteractive"
3333
RUN apt-get update \
34-
&& apt-get install -y -q \
34+
&& apt-get install -y -q --no-install-recommends \
3535
libsecp256k1-dev \
3636
lsof \
3737
python \
@@ -46,8 +46,9 @@ RUN apt-get update \
4646
RUN echo "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu ${UBUNTU_NAME} main" >> /etc/apt/sources.list
4747
RUN curl https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add -
4848

49+
4950
RUN apt-get update \
50-
&& apt-get install -y \
51+
&& apt-get install -y --no-install-recommends \
5152
sgx-aesm-service \
5253
libsgx-dcap-ql \
5354
libsgx-urts \

0 commit comments

Comments
 (0)