chore: Update Dockerfile (#7661)

This commit is contained in:
Brennan Kinney
2025-11-09 07:32:23 +13:00
committed by GitHub
parent 6f3423f7c0
commit 6538785def

View File

@@ -1,21 +1,14 @@
ARG DEBIAN_IMAGE=debian:stable-slim ARG DEBIAN_IMAGE=debian:stable-slim
ARG BASE=gcr.io/distroless/static-debian12:nonroot ARG BASE=gcr.io/distroless/static-debian12:nonroot
FROM --platform=$BUILDPLATFORM ${DEBIAN_IMAGE} AS build
SHELL [ "/bin/sh", "-ec" ]
RUN export DEBCONF_NONINTERACTIVE_SEEN=true \ FROM --platform=$BUILDPLATFORM ${DEBIAN_IMAGE} AS build
DEBIAN_FRONTEND=noninteractive \ ARG DEBIAN_FRONTEND=noninteractive
DEBIAN_PRIORITY=critical \ RUN apt-get -qq update \
TERM=linux ; \ && apt-get -qq --no-install-recommends install libcap2-bin
apt-get -qq update ; \
apt-get -qq upgrade ; \
apt-get -qq --no-install-recommends install ca-certificates libcap2-bin; \
apt-get clean
COPY coredns /coredns COPY coredns /coredns
RUN setcap cap_net_bind_service=+ep /coredns RUN setcap cap_net_bind_service=+ep /coredns
FROM --platform=$TARGETPLATFORM ${BASE} FROM ${BASE}
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=build /coredns /coredns COPY --from=build /coredns /coredns
USER nonroot:nonroot USER nonroot:nonroot
# Reset the working directory inherited from the base image back to the expected default: # Reset the working directory inherited from the base image back to the expected default: