graphql-engine/packaging/graphql-engine-base/debian.dockerfile
hasura-bot 08e5b815cb [security] Update Debian base image to debian:buster-20220711-slim
GITHUB_PR_NUMBER: 8737
GITHUB_PR_URL: https://github.com/hasura/graphql-engine/pull/8737

PR-URL: https://github.com/hasura/graphql-engine-mono/pull/5302
Co-authored-by: Andrew Louis <996681+andrewlouis93@users.noreply.github.com>
GitOrigin-RevId: 4b1569ae8c543c49ccb0b6a283b4b20e3c9fe293
2022-08-09 10:45:25 +00:00

40 lines
1.6 KiB
Docker

# DATE VERSION: 2022-08-02
# Modify the above date version (YYYY-MM-DD) if you want to rebuild the image for security updates
FROM debian:buster-20220711-slim
# TARGETPLATFORM is automatically set up by docker buildx based on the platform we are targetting for
ARG TARGETPLATFORM
ENV LANG=C.UTF-8 LC_ALL=C.UTF-8
RUN groupadd -g 1001 hasura && useradd -m -u 1001 -g hasura hasura
RUN apt-get update \
&& apt-get install -y gnupg2 curl apt-transport-https \
&& apt-get update \
&& apt-get install -y ca-certificates libkrb5-3 libpq5 libnuma1 unixodbc-dev default-libmysqlclient-dev default-mysql-client
RUN if [ "$TARGETPLATFORM" = "linux/amd64" ] ; then \
curl -s https://packages.microsoft.com/config/debian/9/prod.list > /etc/apt/sources.list.d/mssql-release.list \
&& curl -s https://packages.microsoft.com/keys/microsoft.asc | apt-key add - \
&& apt-get update \
&& ACCEPT_EULA=Y apt-get install -y msodbcsql17 ; \
fi
# Install pg_dump
RUN echo "deb http://apt.postgresql.org/pub/repos/apt/ buster-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
&& curl -s https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
&& apt-get -y update \
&& apt-get install -y \
postgresql-client-14 \
# delete all pg tools except pg_dump to keep the image minimal
&& find /usr/bin -name 'pg*' -not -path '/usr/bin/pg_dump' -delete
# Cleanup unwanted files and packages
RUN apt-get -y remove curl gnupg2 \
&& apt-get -y auto-remove \
&& apt-get -y clean \
&& rm -rf /var/lib/apt/lists/* \
&& rm -rf /usr/share/doc/ \
&& rm -rf /usr/share/man/ \
&& rm -rf /usr/share/locale/