Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate the base image to bci-busybox and add nginx support #217

Merged
merged 2 commits into from
Nov 27, 2024

Conversation

chiukapoor
Copy link
Contributor

pjbgf and others added 2 commits November 11, 2024 12:25
The aim of this change is to decrease the long-term number of CVEs this image
gets due to the decreased attack surface. As a result, the final image is 40MB
lighter and does not contain the following commands:

add-shell
bbconfig
blkdiscard
busybox
chroot
cifsiostat
c_rehash
crond
crontab
depmod
dumpkmap
envsubst
fbsplash
fc-conflist
fc-list
fc-match
fc-pattern
fc-query
fc-scan
fc-validate
fdflush
fstrim
geoiplookup6
getty
halt
hwclock
ifconfig
ifdown
ifenslave
ifup
init
inotifyd
insmod
iostat
ipaddr
iplink
ipneigh
iproute
iprule
kbd_mode
link
linux32
linux64
logread
lsmod
modinfo
modprobe
mountpoint
ntpd
partprobe
printenv
raidautorun
rdate
rdev
readahead
reboot
remove-shell
rev
rfkill
rmmod
route
swapoff
swapon
syslogd
tapestat
traceroute6
tree
unlzop
watchdog
xsltproc

Signed-off-by: Paulo Gomes <[email protected]>
@chiukapoor chiukapoor requested a review from a team as a code owner November 11, 2024 14:18
@chiukapoor chiukapoor requested a review from pjbgf November 19, 2024 04:48
Copy link
Member

@jiaqiluo jiaqiluo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@chiukapoor chiukapoor merged commit c0ded27 into rancher:master Nov 27, 2024
3 checks passed
krunalhinguu added a commit to krunalhinguu/rke-tools that referenced this pull request Dec 13, 2024
krunalhinguu added a commit that referenced this pull request Dec 13, 2024
Revert "Merge pull request #217 from chiukapoor/add-nginx-binary"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants