Skip to content

Fix bug causing zero vulnerabilities on redhat images

Adam Cohen requested to merge fix-bug-with-rpm into master

What does this MR do?

This MR does the following:

  1. Fixes an issue causing container scans on Red Hat based images to return with zero vulnerabilities. The reason why this was happening is because the Dockerfile didn't install the rpm package properly and only installed the /bin/rpm executable and not all of the required library files.
  2. Adds a new CLAIR_TRACE environment variable which defaults to false, but when set to true, will print all output from the clair server process, allowing for easier debugging of issues in the future.

Note: because this MR installs the complete rpm package into the final Docker layer, it increases the size of the resulting Docker image from 43.5MB to 60.2MB.

What are the relevant issue numbers?

gitlab-org/gitlab#211873 (closed)

Does this MR meet the acceptance criteria?

Edited by Adam Cohen

Merge request reports