Skip to content

Commit a6b657c

Browse files
committed
Feat: Update base image to fix Konflux RPM signature scan
This commit update the Containerfile, switching the base image to the ubi9/python-312 image. This eliminates manual Python installations, resulting in a cleaner and more efficient build. This change resolves issues with the Konflux RPM signature scan by mitigating the risk of unverified artifact injection. Signed-off-by: Eran Cohen <eranco@redhat.com>
1 parent 0cb49fc commit a6b657c

1 file changed

Lines changed: 2 additions & 7 deletions

File tree

Containerfile

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,8 @@
11
# vim: set filetype=dockerfile
2-
FROM registry.access.redhat.com/ubi9/ubi-minimal AS builder
2+
FROM registry.redhat.io/ubi9/python-312:9.6 AS builder
33

44
ARG APP_ROOT=/app-root
55

6-
# Install Python
7-
RUN microdnf install -y --nodocs --setopt=keepcache=0 --setopt=tsflags=nodocs \
8-
python3.12 python3.12-devel python3.12-pip
9-
106
# UV_PYTHON_DOWNLOADS=0 : Disable Python interpreter downloads and use the system interpreter.
117
ENV UV_COMPILE_BYTECODE=0 \
128
UV_LINK_MODE=copy \
@@ -26,9 +22,8 @@ RUN uv sync --locked --no-install-project --no-dev
2622

2723

2824
# Final image without uv package manager
29-
FROM registry.access.redhat.com/ubi9/ubi-minimal
25+
FROM registry.redhat.io/ubi9/python-312:9.6
3026
ARG APP_ROOT=/app-root
31-
RUN microdnf install -y --nodocs --setopt=keepcache=0 --setopt=tsflags=nodocs python3.12 python3.12-pip
3227
WORKDIR /app-root
3328

3429
# PYTHONDONTWRITEBYTECODE 1 : disable the generation of .pyc

0 commit comments

Comments
 (0)