This is an automated email from the ASF dual-hosted git repository.
xiangfu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pinot.git
The following commit(s) were added to refs/heads/master by this push:
new 687659d138 Fix vulnerabilities for msopenjdk 11 pinot-base-runtime
image. (#14030)
687659d138 is described below
commit 687659d13815221beb4e9623279a3048390ad446
Author: Abhishek Sharma <abhishek.sha...@spothero.com>
AuthorDate: Mon Sep 23 11:00:52 2024 -0400
Fix vulnerabilities for msopenjdk 11 pinot-base-runtime image. (#14030)
* Fix vulnerabilities for msopenjdk 11 pinot-base-runtime image.
* Changes as per the PR comment.
---
.../pinot-base/pinot-base-runtime/ms-openjdk.dockerfile | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/docker/images/pinot-base/pinot-base-runtime/ms-openjdk.dockerfile
b/docker/images/pinot-base/pinot-base-runtime/ms-openjdk.dockerfile
index 32d3283d98..0c3af4db5c 100644
--- a/docker/images/pinot-base/pinot-base-runtime/ms-openjdk.dockerfile
+++ b/docker/images/pinot-base/pinot-base-runtime/ms-openjdk.dockerfile
@@ -20,12 +20,19 @@
ARG JAVA_VERSION=11
ARG JDK_IMAGE=mcr.microsoft.com/openjdk/jdk
-FROM ${JDK_IMAGE}:${JAVA_VERSION}-ubuntu
+FROM ${JDK_IMAGE}:${JAVA_VERSION}-ubuntu AS builder
+
+FROM ubuntu:24.10
+ARG JAVA_VERSION
+ENV LANG=en_US.UTF-8
+ENV JAVA_HOME="/usr/lib/jvm/msopenjdk-${JAVA_VERSION}"
+ENV PATH="${JAVA_HOME}/bin:${PATH}"
+COPY --from=builder $JAVA_HOME $JAVA_HOME
LABEL MAINTAINER=d...@pinot.apache.org
RUN apt-get update && \
- apt-get install -y --no-install-recommends vim less wget curl git
python-is-python3 sysstat procps linux-tools-generic libtasn1-6 zstd && \
+ apt-get install -y --no-install-recommends vim less wget curl git
python-is-python3 sysstat procps linux-tools-generic libtasn1-6 zstd
ca-certificates && \
rm -rf /var/lib/apt/lists/*
RUN case `uname -m` in \
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@pinot.apache.org
For additional commands, e-mail: commits-h...@pinot.apache.org
