Miau

.drone.yml

@@ -26,7 +26,7 @@ steps:
         fi
 
   - name: security-scan
-    image: ghcr.io/aquasecurity/trivy:0.69.3
+    image: aquasec/trivy:latest
     commands:
       - trivy image --input image.tar --severity HIGH,CRITICAL --exit-code 1
 

Dockerfile

@@ -1,5 +1,6 @@
+# BUILD STAGE
 # Base-Image
-FROM ubuntu:latest
+FROM debian:stable-slim AS build
 
 # Pakete installieren
 RUN apt-get update
@@ -9,14 +10,29 @@ RUN apt-get install -y build-essential gcc curl vim net-tools
 WORKDIR /app
 
 # alles kopieren
-COPY . .
+COPY deployment.c .
 
 # Code kompilieren
 RUN gcc -o deployment deployment.c
 
+
+# RUNTIME STAGE
+FROM debian:stable-slim
+
+RUN useradd -m appuser
+USER appuser
+
+WORKDIR /app
+
+COPY --from=build /app/deployment .
+
+VOLUME ["/output"]
+
+HEALTHCHECK CMD test -f /output/output.txt || exit 1
+
 # Verzeichnis für Ausgabe anlegen
-RUN mkdir /output
+# RUN mkdir /output
 
 # Ausgabe wird ins Container-Dateisystem geschrieben
 ENTRYPOINT ["/bin/bash", "-c"]
-CMD ["./deployment 10 > /output/output.txt && tail -f /output/output.txt"]
+CMD ["./deployment 10 > /output/output.txt && tail -f /output/output.txt"]