public_git/kaniko
1
0
Fork 0
mirror of https://github.com/GoogleContainerTools/kaniko synced 2026-10-18 18:58:32 +02:00
Code Issues Releases Wiki Activity

CA certificates tasks in kaniko images (#2142)

Browse Source 
* deploy: avoid duplicate certificates in images

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>

* deploy: use current stable Debian release image

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
This commit is contained in:
Konstantin Demin
2022-06-21 14:28:11 -04:00
committed by GitHub
parent 679c71c907
commit 18f745de5b
4 changed files with 12 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/Dockerfile_debug
+3 -8
View File
@@ -42,13 +42,8 @@ RUN \
make GOARCH=$TARGETARCH out/warmer
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM debian:bullseye-slim AS certs
RUN apt update && apt install -y ca-certificates
FROM scratch
COPY --from=0 /src/out/executor /kaniko/executor
@@ -65,7 +60,7 @@ COPY --from=busybox:1.32.0 /*lib /lib
# Declare /busybox as a volume to get it automatically in the path to ignore
VOLUME /busybox
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/
COPY --from=0 /kaniko/.docker /kaniko/.docker
COPY files/nsswitch.conf /etc/nsswitch.conf
ENV HOME /root