Merge pull request #123 from replicatedcom/fix-debian-stretch-slim-cves

Add more packages to fix cves, unfortunately also adding 20MB
replicatedcom · Mar 13, 2018 · 88b5e54 · 88b5e54
2 parents d15e826 + c045e3e
commit 88b5e54
Show file tree

Hide file tree

Showing 2 changed files with 35 additions and 7 deletions.
diff --git a/build/Dockerfile b/build/Dockerfile
@@ -5,11 +5,25 @@ RUN make build
 
 FROM debian:stretch-slim
 RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install --no-install-recommends -y \
-  sensible-utils \
-  ca-certificates \
-  procps \
-  systemd \
-  iproute2 \
+    ca-certificates \
+    procps \
+    iproute2 \
+    sensible-utils \
+    systemd \
+    libc6 \
+    libc-bin \
+    multiarch-support \
+    libudev1 \
+    libncurses5 \
+    ncurses-base \
+    ncurses-bin \
+    libblkid1 \
+    libfdisk1 \
+    libmount1 \
+    libsmartcols1 \
+    libuuid1 \
+    mount \
+    util-linux \
   && rm -rf /var/lib/apt/lists/*
 COPY --from=0 /go/src/github.com/replicatedcom/support-bundle/bin/amd64/support-bundle /usr/local/bin/support-bundle
 ENV IN_CONTAINER 1

diff --git a/build/Dockerfile-release b/build/Dockerfile-release
@@ -1,10 +1,24 @@
 FROM debian:stretch-slim
 RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install --no-install-recommends -y \
-    sensible-utils \
     ca-certificates \
     procps \
-    systemd \
     iproute2 \
+    sensible-utils \
+    systemd \
+    libc6 \
+    libc-bin \
+    multiarch-support \
+    libudev1 \
+    libncurses5 \
+    ncurses-base \
+    ncurses-bin \
+    libblkid1 \
+    libfdisk1 \
+    libmount1 \
+    libsmartcols1 \
+    libuuid1 \
+    mount \
+    util-linux \
   && rm -rf /var/lib/apt/lists/*
 COPY support-bundle /usr/local/bin/support-bundle
 ENV IN_CONTAINER 1