fix: CVE issues in image build

This commit is contained in:
andyzhangx 2022-03-27 08:42:15 +00:00
parent a70b3a05b4
commit f8b038b352
2 changed files with 3 additions and 2 deletions

View File

@ -17,7 +17,7 @@ FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0
RUN apt update && apt-mark unhold libcap2
RUN clean-install ca-certificates cifs-utils util-linux e2fsprogs mount udev xfsprogs
# install updated packages to fix CVE issues
RUN clean-install libgmp10 bsdutils libssl1.1 openssl
RUN clean-install libgmp10 bsdutils libssl1.1 openssl libc6 libc-bin libsystemd0
LABEL maintainers="andyzhangx"
LABEL description="SMB CSI Driver"

View File

@ -6,7 +6,8 @@ FROM mcr.microsoft.com/windows/nanoserver:${OSVERSION}
LABEL description="CSI SMB plugin"
ARG ARCH=amd64
COPY ./_output/${ARCH}/smbplugin.exe /smbplugin.exe
ARG binary=./_output/${ARCH}/smbplugin.exe
COPY ${binary} /smbplugin.exe
COPY --from=core /Windows/System32/netapi32.dll /Windows/System32/netapi32.dll
USER ContainerAdministrator
ENTRYPOINT ["/smbplugin.exe"]