[
https://issues.apache.org/jira/browse/SOLR-16752?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17714154#comment-17714154
]
ASF subversion and git services commented on SOLR-16752:
--------------------------------------------------------
Commit 8a0bf24357ce3f083e9fdf4c66ae7ebf08beacee in solr's branch
refs/heads/main from Bui Quang Cuong
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=8a0bf24357c ]
SOLR-16752: Reduce attack surface and size for Docker image (#1575)
> Reduce attack surface and size for Docker image
> -----------------------------------------------
>
> Key: SOLR-16752
> URL: https://issues.apache.org/jira/browse/SOLR-16752
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Docker
> Affects Versions: 8.11
> Reporter: Cuong Bui
> Priority: Major
> Labels: Docker, dockerfile
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> Hi,
> I have created this issue here as a replacement for the pull request on
> GitHub: https://github.com/apache/solr-docker/pull/15.
> To summarize, the Dockerfiles should contain the {{--no-install-recommends}}
> option wherever there is an {{apt-get install}} command. This should help
> improve the security of the container and reduce the risk of potential
> attacks.
> In detail, the {{--no-install-recommends}} option helps remove unnecessary
> {{apt}} packages that are not needed for the container's functionality. This
> change can not only trim your image size but also reduce the attack surface.
> I hope you find this information useful. Please let me know if you have any
> concerns.
> Thank you.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
