Skip to content

fix: use openssl from Builder container to avoid run container dnf call #152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix: use openssl from Builder container to avoid run container dnf call #152

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,9 @@ FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
WORKDIR /
COPY --from=builder /workspace/manager .
COPY --from=builder /workspace/controllers/manifests ./manifests/
RUN microdnf install -y openssl && microdnf clean all
COPY --from=builder /usr/bin/openssl /usr/bin/openssl
COPY --from=builder /lib64/libssl.so.3 /lib64/libssl.so.3
COPY --from=builder /lib64/libcrypto.so.3 /lib64/libcrypto.so.3
Comment on lines +39 to +41
Copy link
Collaborator

@leseb leseb Sep 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hum this feels "dangerous", are the builder and final image the same? Same distro? Same glibc version?

Copy link
Collaborator

@leseb leseb Sep 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Btw how can we repro? I have no subscription and could install the package 🤔

$ podman run -ti --entrypoint=bash  registry.access.redhat.com/ubi9/ubi-minimal:latest
Trying to pull registry.access.redhat.com/ubi9/ubi-minimal:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:73ac460760dbc07b4e932677ed1d86c86c51259cd8ea7c5f1d5b13c9dd3d9d59
Copying config sha256:f36340c5d8884dc930bfe0a7a5d3602b665e10569317ce1931b78e15444938b9
Writing manifest to image destination
Storing signatures
[root@09c1c81257d6 /]# microdnf install -y openssl && microdnf clean all

(microdnf:8): librhsm-WARNING **: 08:52:00.526: Found 0 entitlement certificates

(microdnf:8): librhsm-WARNING **: 08:52:00.529: Found 0 entitlement certificates
Downloading metadata...
Downloading metadata...
Downloading metadata...
Package                                                                        Repository                   Size
Installing:                                                                                                     
 openssl-1:3.2.2-6.el9_5.1.aarch64                                             ubi-9-baseos-rpms          1.4 MB
Transaction Summary:
 Installing:        1 packages
 Reinstalling:      0 packages
 Upgrading:         0 packages
 Obsoleting:        0 packages
 Removing:          0 packages
 Downgrading:       0 packages
Downloading packages...
Running transaction test...
Installing: openssl;1:3.2.2-6.el9_5.1;aarch64;ubi-9-baseos-rpms
Complete.

(microdnf:65): librhsm-WARNING **: 08:52:02.258: Found 0 entitlement certificates

(microdnf:65): librhsm-WARNING **: 08:52:02.259: Found 0 entitlement certificates
Complete.
[root@09c1c81257d6 /]#

USER 1001

ENTRYPOINT ["/manager"]