matty/lmgcitfy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'chore/prod-image-trivy-base' into 'main'

Browse Source 
Slim prod image: patch Alpine openssl, drop unused npm

See merge request guncad-index/lmgcitfy!2
This commit is contained in:
The Shittinator
2026-09-02 04:52:54 +00:00
parent 4f61902ca2 712374d1bf
commit c9f76173a4
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+11 -1
View File
@@ -17,7 +17,17 @@ FROM docker.io/library/node:$nodever-alpine AS prod
WORKDIR /app WORKDIR /app
ENV NODE_ENV=production ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1 ENV NEXT_TELEMETRY_DISABLED=1
RUN addgroup -S nextjs && adduser -S nextjs -G nextjs RUN addgroup -S nextjs && adduser -S nextjs -G nextjs \
&& apk add --no-cache --upgrade "libcrypto3>=3.5.8-r0" "libssl3>=3.5.8-r0" \
&& rm -rf \
/usr/local/lib/node_modules/npm \
/usr/local/lib/node_modules/corepack \
/opt/yarn-v* \
/usr/local/bin/npm \
/usr/local/bin/npx \
/usr/local/bin/corepack \
/usr/local/bin/yarn \
/usr/local/bin/yarnpkg
# Copy standalone server and assets # Copy standalone server and assets
COPY --from=builder /app/.next/standalone ./ COPY --from=builder /app/.next/standalone ./
COPY --from=builder /app/.next/static ./.next/static COPY --from=builder /app/.next/static ./.next/static