Update because of security check

This commit is contained in:
Andreas Katzenberger 2026-04-13 21:42:22 +02:00
parent 1657b50ca4
commit c1610ac12e

View File

@ -1,5 +1,5 @@
# STAGE 1: Builder # STAGE 1: Builder
FROM alpine:latest AS builder FROM alpine:3.23 AS builder
# Pakete installieren (gcc & Standardbibliotheken) # Pakete installieren (gcc & Standardbibliotheken)
RUN apk add --no-cache gcc musl-dev RUN apk add --no-cache gcc musl-dev
@ -14,11 +14,15 @@ COPY deployment.c .
RUN gcc -O2 -o deployment deployment.c RUN gcc -O2 -o deployment deployment.c
# STAGE 2: Runner # STAGE 2: Runner
FROM alpine:latest FROM alpine:3.23
# Arbeitsverzeichnis setzen # Arbeitsverzeichnis setzen
WORKDIR /app WORKDIR /app
# OPTIMIERUNG: System-Update durchführen, um CVEs zu fixen
# 'apk upgrade' installiert die Version 3.3.7-r0 von OpenSSL
RUN apk update && apk upgrade --no-cache
# Non-Root User anlegen # Non-Root User anlegen
# RUN addgroup -S appgroup # RUN addgroup -S appgroup
# RUN adduser -S appuser -G appgroup # RUN adduser -S appuser -G appgroup