mirror of
https://github.com/anchore/syft.git
synced 2026-10-31 06:26:30 +01:00
Alex Goodman
de98400c39
the base image is digest-pinned to a bullseye snapshot whose InRelease has expired, so `apt-get update` now exits 100 on any cold fixture build. rather than disable Check-Valid-Until (which just delays the next break), skip apt entirely: - `less` was never used and `unzip` already ships in the base image - rezip with `jar cfM` from the base JDK instead of installing `zip` the `-M` matters here: this fixture intentionally has no META-INF/MANIFEST.MF, and plain `jar cf` would generate one. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
27 lines
635 B
Docker
27 lines
635 B
Docker
FROM jenkins/jenkins:2.346.3-slim-jdk17@sha256:028fbbd9112c60ed086f5197fcba71992317864d27644e5949cf9c52ff4b65f0 AS base
|
|
|
|
USER root
|
|
|
|
WORKDIR /usr/share/jenkins
|
|
|
|
RUN mkdir tmp
|
|
|
|
WORKDIR /usr/share/jenkins/tmp
|
|
|
|
RUN unzip ../jenkins.war 2>&1 > /dev/null
|
|
|
|
RUN rm -rf ./META-INF/MANIFEST.MF ./WEB-INF ./jsbundles ./scripts ./css
|
|
|
|
WORKDIR /usr/share/jenkins
|
|
|
|
RUN rm -rf jenkins.war
|
|
|
|
# use jar (from the JDK in the base image) to rezip -- M keeps it manifest-less, which is the point of this fixture
|
|
RUN cd ./tmp && jar cfM ../jenkins.war . && cd ..
|
|
|
|
RUN rm -rf ./tmp
|
|
|
|
FROM scratch
|
|
|
|
COPY --from=base /usr/share/jenkins/jenkins.war /jenkins.war
|