diff --git a/glibc/Dockerfile b/glibc/Dockerfile index 0443145..5af8f03 100644 --- a/glibc/Dockerfile +++ b/glibc/Dockerfile @@ -29,7 +29,14 @@ RUN set -x \ fi; \ done +FROM ${ARCH}alpine:latest as alpine + FROM ${ARCH}busybox:glibc MAINTAINER The Prometheus Authors +# Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities +RUN rm /bin/* +COPY --from=alpine /bin/busybox /bin/ +RUN /bin/busybox --install /bin + COPY --from=0 /rootfs / diff --git a/uclibc/Dockerfile b/uclibc/Dockerfile index 0d9b385..16e74b7 100644 --- a/uclibc/Dockerfile +++ b/uclibc/Dockerfile @@ -28,7 +28,14 @@ RUN set -x \ fi; \ done +FROM ${ARCH}alpine:latest as alpine + FROM ${ARCH}busybox:uclibc MAINTAINER The Prometheus Authors +# Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities +RUN rm /bin/* +COPY --from=alpine /bin/busybox /bin/ +RUN /bin/busybox --install /bin + COPY --from=0 /rootfs /