Add no-network option

wikimedia · Jun 2, 2023 · 8e3af6b · 8e3af6b
1 parent 5dfcc29
commit 8e3af6b
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 12 deletions.
diff --git a/1.35/fpm-alpine/Dockerfile b/1.35/fpm-alpine/Dockerfile
@@ -39,8 +39,8 @@ RUN set -eux; \
 			| sort -u \
 			| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
 	)"; \
-	apk add --virtual .mediawiki-phpext-rundeps $runDeps; \
-	apk del .build-deps
+	apk add --no-network --virtual .mediawiki-phpext-rundeps $runDeps; \
+	apk del --no-network .build-deps
 
 # set recommended PHP.ini settings
 # see https://secure.php.net/manual/en/opcache.installation.php
@@ -84,6 +84,6 @@ RUN set -eux; \
 	rm -rf "$GNUPGHOME" mediawiki.tar.gz.sig mediawiki.tar.gz; \
 	chown -R www-data:www-data extensions skins cache images; \
 	\
-	apk del .fetch-deps
+	apk del --no-network .fetch-deps
 
 CMD ["php-fpm"]
diff --git a/1.38/fpm-alpine/Dockerfile b/1.38/fpm-alpine/Dockerfile
@@ -39,8 +39,8 @@ RUN set -eux; \
 			| sort -u \
 			| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
 	)"; \
-	apk add --virtual .mediawiki-phpext-rundeps $runDeps; \
-	apk del .build-deps
+	apk add --no-network --virtual .mediawiki-phpext-rundeps $runDeps; \
+	apk del --no-network .build-deps
 
 # set recommended PHP.ini settings
 # see https://secure.php.net/manual/en/opcache.installation.php
@@ -84,6 +84,6 @@ RUN set -eux; \
 	rm -rf "$GNUPGHOME" mediawiki.tar.gz.sig mediawiki.tar.gz; \
 	chown -R www-data:www-data extensions skins cache images; \
 	\
-	apk del .fetch-deps
+	apk del --no-network .fetch-deps
 
 CMD ["php-fpm"]
diff --git a/1.39/fpm-alpine/Dockerfile b/1.39/fpm-alpine/Dockerfile
@@ -39,8 +39,8 @@ RUN set -eux; \
 			| sort -u \
 			| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
 	)"; \
-	apk add --virtual .mediawiki-phpext-rundeps $runDeps; \
-	apk del .build-deps
+	apk add --no-network --virtual .mediawiki-phpext-rundeps $runDeps; \
+	apk del --no-network .build-deps
 
 # set recommended PHP.ini settings
 # see https://secure.php.net/manual/en/opcache.installation.php
@@ -84,6 +84,6 @@ RUN set -eux; \
 	rm -rf "$GNUPGHOME" mediawiki.tar.gz.sig mediawiki.tar.gz; \
 	chown -R www-data:www-data extensions skins cache images; \
 	\
-	apk del .fetch-deps
+	apk del --no-network .fetch-deps
 
 CMD ["php-fpm"]
diff --git a/Dockerfile-alpine.template b/Dockerfile-alpine.template
@@ -39,8 +39,8 @@ RUN set -eux; \
 			| sort -u \
 			| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
 	)"; \
-	apk add --virtual .mediawiki-phpext-rundeps $runDeps; \
-	apk del .build-deps
+	apk add --no-network --virtual .mediawiki-phpext-rundeps $runDeps; \
+	apk del --no-network .build-deps
 
 # set recommended PHP.ini settings
 # see https://secure.php.net/manual/en/opcache.installation.php
@@ -84,6 +84,6 @@ RUN set -eux; \
 	rm -rf "$GNUPGHOME" mediawiki.tar.gz.sig mediawiki.tar.gz; \
 	chown -R www-data:www-data extensions skins cache images; \
 	\
-	apk del .fetch-deps
+	apk del --no-network .fetch-deps
 
 CMD ["%%CMD%%"]