switch to debian-slim, reduces each image by almost 50MB

diff --git a/Dockerfile-auth b/Dockerfile-auth
index ee95298852b3ea49a7adad6dd370442db7eece32..6204d45637cbec4c3f67bee99ffcbc243ca198e1 100644 (file)
--- a/Dockerfile-auth
+++ b/Dockerfile-auth
@@ -1,5 +1,5 @@
 # our chosen base image
-FROM debian:10 AS builder
+FROM debian:10-slim AS builder
 
 # TODO: make sure /source looks roughly the same from git or tar
 
@@ -45,13 +45,13 @@ RUN cd /tmp && mkdir /build/tmp/ && mkdir debian && \
     dpkg-deb -I equivs-dummy_1.0_all.deb && cp equivs-dummy_1.0_all.deb /build/tmp/
 
 # Runtime
-FROM debian:10
+FROM debian:10-slim
 
 # Reusable layer for base update - Should be cached from builder
 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
 
 # Ensure python3 is present (for startup script), and sqlite3 (for db schema), and tini (for signal management)
-RUN apt-get install -y python3 sqlite3 tini && apt-get clean
+RUN apt-get install -y python3 sqlite3 tini libcap2-bin && apt-get clean
 
 # Output from builder
 COPY --from=builder /build /

diff --git a/Dockerfile-dnsdist b/Dockerfile-dnsdist
index 761bc7eab3cd9f0db3f6c4f0dd196955fe83a6bd..88b3d2df05412c4dc534136dec0b6b932416159c 100644 (file)
--- a/Dockerfile-dnsdist
+++ b/Dockerfile-dnsdist
@@ -1,5 +1,5 @@
 # our chosen base image
-FROM debian:10 AS builder
+FROM debian:10-slim AS builder
 
 # TODO: make sure /source looks roughly the same from git or tar
 
@@ -48,13 +48,13 @@ RUN cd /tmp && mkdir /build/tmp/ && mkdir debian && \
 
 # Runtime
 
-FROM debian:10
+FROM debian:10-slim
 
 # Reusable layer for base update - Should be cached from builder
 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
 
 # Ensure python3 is present (for startup script), and python3-atomicwrites (for backend management), and tini (for signal management)
-RUN apt-get install -y python3 python3-atomicwrites tini && apt-get clean
+RUN apt-get install -y python3 python3-atomicwrites tini libcap2-bin && apt-get clean
 
 # Output from builder
 COPY --from=builder /build /

diff --git a/Dockerfile-recursor b/Dockerfile-recursor
index cf92515642a1e459c74c8ee02dfea2bc4261c73d..dde1e1b97c2f9ea9dc5273c0bba70300df2ec7f2 100644 (file)
--- a/Dockerfile-recursor
+++ b/Dockerfile-recursor
@@ -5,7 +5,7 @@
 #   dig a www.example.com @0 -p 1053
 
 # Builder
-FROM debian:10 AS builder
+FROM debian:10-slim AS builder
 
 # Reusable layer for base update
 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
@@ -54,13 +54,13 @@ RUN cd /tmp && mkdir /build/tmp/ && mkdir debian && \
     dpkg-deb -I equivs-dummy_1.0_all.deb && cp equivs-dummy_1.0_all.deb /build/tmp/
 
 # Runtime
-FROM debian:10
+FROM debian:10-slim
 
 # Reusable layer for base update - Should be cached from builder
 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
 
 # Ensure python3 is present (for startup script), and tini for signal management
-RUN apt-get install -y python3 tini && apt-get clean
+RUN apt-get install -y python3 tini libcap2-bin && apt-get clean
 
 # Executables from builder
 COPY --from=builder /build /