mirror of
https://github.com/coredns/coredns.git
synced 2025-10-31 02:03:20 -04:00
a5388133de
- `-qq` implies `-y` for `apt-get`. Also there never was `-yy`, only `-y`. - `--no-install-recommends` added at the request of review feedback. - Add a reference comment for better context of why `WORKDIR` is explicitly set to the default, as this was a fix for an implicit change when the base image was adjusted (_originally a breaking change for users of the image at the time_). Signed-off-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
26 lines
925 B
Docker
26 lines
925 B
Docker
ARG DEBIAN_IMAGE=debian:stable-slim
|
|
ARG BASE=gcr.io/distroless/static-debian12:nonroot
|
|
FROM --platform=$BUILDPLATFORM ${DEBIAN_IMAGE} AS build
|
|
SHELL [ "/bin/sh", "-ec" ]
|
|
|
|
RUN export DEBCONF_NONINTERACTIVE_SEEN=true \
|
|
DEBIAN_FRONTEND=noninteractive \
|
|
DEBIAN_PRIORITY=critical \
|
|
TERM=linux ; \
|
|
apt-get -qq update ; \
|
|
apt-get -qq upgrade ; \
|
|
apt-get -qq --no-install-recommends install ca-certificates libcap2-bin; \
|
|
apt-get clean
|
|
COPY coredns /coredns
|
|
RUN setcap cap_net_bind_service=+ep /coredns
|
|
|
|
FROM --platform=$TARGETPLATFORM ${BASE}
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|
|
COPY --from=build /coredns /coredns
|
|
USER nonroot:nonroot
|
|
# Reset the working directory inherited from the base image back to the expected default:
|
|
# https://github.com/coredns/coredns/issues/7009#issuecomment-3124851608
|
|
WORKDIR /
|
|
EXPOSE 53 53/udp
|
|
ENTRYPOINT ["/coredns"]
|