Skip to content

Commit

Permalink
Clean up the docker configuration files based on trivy feedback
Browse files Browse the repository at this point in the history
Note that trivy notes errors about missing USER declarations. The
final images that are built, pdo_ccf, pdo_services, and pdo_client
all have users defined.

Signed-off-by: Mic Bowman <mic.bowman@intel.com>
  • Loading branch information
cmickeyb committed Oct 4, 2024
1 parent c508339 commit 2c1585f
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
2 changes: 1 addition & 1 deletion docker/pdo_base.dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ ARG ADD_APT_PKGS=

ENV DEBIAN_FRONTEND "noninteractive"
RUN apt-get update \
&& apt-get install -y -q \
&& apt-get install -y -q --no-install-recommends \
autoconf \
automake \
build-essential \
Expand Down
5 changes: 3 additions & 2 deletions docker/pdo_ccf_base.dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ ARG ADD_APT_PKGS=

ENV DEBIAN_FRONTEND "noninteractive"
RUN apt-get update \
&& apt-get install -y -q \
&& apt-get install -y -q --no-install-recommends \
libsecp256k1-dev \
lsof \
python \
Expand All @@ -46,8 +46,9 @@ RUN apt-get update \
RUN echo "deb [arch=amd64] https://download.01.org/intel-sgx/sgx_repo/ubuntu ${UBUNTU_NAME} main" >> /etc/apt/sources.list
RUN curl https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | apt-key add -


RUN apt-get update \
&& apt-get install -y \
&& apt-get install -y --no-install-recommends \
sgx-aesm-service \
libsgx-dcap-ql \
libsgx-urts \
Expand Down

0 comments on commit 2c1585f

Please sign in to comment.