Skip to content

Commit e97b61b

Browse files
committed
fix(frontend): upgrade to UBI 9 to resolve python 3.6 vulnerability
Signed-off-by: xnaveen <naveen010210@gmail.com>
1 parent f4892de commit e97b61b

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

chaoscenter/web/Dockerfile

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,9 @@
1-
FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10
1+
FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7
22

33
# apply latest patches
4-
RUN microdnf update --nodocs \
5-
&& microdnf module enable nginx:1.20 \
6-
&& microdnf install --nodocs nginx \
7-
&& microdnf install --nodocs python3 \
4+
RUN microdnf update -y --nodocs \
5+
&& microdnf install -y --nodocs nginx \
6+
&& microdnf install -y --nodocs python3 python3-pip \
87
&& pip3 install --no-cache-dir pyyaml \
98
&& microdnf clean all
109

@@ -16,9 +15,9 @@ WORKDIR /opt/chaos
1615

1716
# Update the permission of group to 0(root) to make it Openshift friendly
1817
# as Openshift runs container with an arbitrary uid that in the root group
19-
RUN chown 65534:0 -R /opt/chaos && \
20-
chown 65534:0 -R /var/log/nginx && \
21-
chown 65534:0 -R /etc/nginx
18+
RUN touch /run/nginx.pid && \
19+
chown -R 65534:0 /opt/chaos /var/log/nginx /etc/nginx /var/lib/nginx /run/nginx.pid && \
20+
chmod -R 755 /opt/chaos /var/log/nginx /etc/nginx /var/lib/nginx /run/nginx.pid
2221

2322
USER 65534
2423

0 commit comments

Comments
 (0)