Fixes #1482 - Remove additional unused dev dependencies to reduce sec…

…urity impacts (#1483)
tl-its-umich-edu · Mar 9, 2023 · 5723311 · 5723311
1 parent dd8d616
commit 5723311
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/dockerfiles/Dockerfile b/dockerfiles/Dockerfile
@@ -62,8 +62,12 @@ COPY . .
 # Generate git version information
 RUN /code/scripts/git_version_info.sh
 
-# Clean up anything we don't need anymore
+# Clean up anything we don't need anymore.
+# Some of these can be purged completely, some of these just remove the package
 RUN apt-get purge -y git curl libcurl4 libcurl3-gnutls && \
+    apt-get remove -y linux-libc-dev && \
+# Keep these packages
+    apt-mark manual libmariadb3 mariadb-common && \
     apt autoremove -y && \
     apt-get clean -y && \
     rm -rf /var/lib/apt/lists/*

diff --git a/dockerfiles/Dockerfile.openshift b/dockerfiles/Dockerfile.openshift
@@ -61,8 +61,12 @@ COPY . .
 # Generate git version information
 RUN bash -l -c ./scripts/git_version_info.sh
 
-# Clean up anything we don't need anymore
+# Clean up anything we don't need anymore.
+# Some of these can be purged completely, some of these just remove the package
 RUN apt-get purge -y git curl libcurl4 libcurl3-gnutls && \
+    apt-get remove -y linux-libc-dev && \
+# Keep these packages
+    apt-mark manual libmariadb3 mariadb-common && \
     apt autoremove -y && \
     apt-get clean -y && \
     rm -rf /var/lib/apt/lists/*