Skip to content

Commit

Permalink
fix(CVE): Update the container and openssl package to reduce containe…
Browse files Browse the repository at this point in the history
…r CVEs

The remaining CVEs are not yet fixable. We have to wait for a new amazoncoretto release.
  • Loading branch information
MichaelsJP committed May 10, 2024
1 parent 3ee59dd commit 80c59c0
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ RUN sed -i "/ors.engine.source_file=.*/s/.*/ors.engine.source_file=\/home\/ors\/
sed -i "/ source_file:.*/s/.*/ source_file: \/home\/ors\/files\/example-heidelberg.osm.gz/" "/tmp/ors/example-ors-config.yml"

# build final image, just copying stuff inside
FROM docker.io/amazoncorretto:21.0.2-alpine3.19 AS publish
FROM docker.io/amazoncorretto:21.0.3-alpine3.19 AS publish

# Build ARGS
ARG UID=1000
Expand All @@ -35,7 +35,7 @@ ARG ORS_HOME=/home/ors
ENV LANG='en_US' LANGUAGE='en_US' LC_ALL='en_US'

# Setup the target system with the right user and folders.
RUN apk update && apk add --no-cache bash yq jq && \
RUN apk update && apk add --no-cache openssl bash yq jq && \
addgroup ors -g ${GID} && \
mkdir -p ${ORS_HOME}/logs ${ORS_HOME}/files ${ORS_HOME}/graphs ${ORS_HOME}/elevation_cache && \
adduser -D -h ${ORS_HOME} -u ${UID} --system -G ors ors && \
Expand Down

0 comments on commit 80c59c0

Please sign in to comment.