Skip to content

Runner-helper fips image cleanups

Axel von Bertoldi requested to merge avonbertoldi/helper-fips-image-fixes into main

This is one in a series of MRs to clean up and reduce actual and potential CVE reports runner fips images:

What does this MR do?

A few minor cleanups in the runner-helper fips docker image.

  • Install fewer (none) packages
  • Inject dumb-init version into image as is done elsewhere
  • Bump dumb-init version to 1.2.5

Why was this MR needed?

Primarily the goal is to to reduce the actual and potential CVE issues by minimizing the number of packages installed in the final image. Secondary goals are to standardize how packages are manually installed.

What's the best way to test this MR?

CI pipeline passes and image is built.

What are the relevant issue numbers?

Edited by Axel von Bertoldi

Merge request reports