From 8f27849ed913d96b73c8cde429ded800204ce066 Mon Sep 17 00:00:00 2001 From: Felipe Moz Date: Fri, 9 Oct 2020 13:47:33 -0300 Subject: [PATCH 1/2] an usefull example of almozt 0 vulnerabilities --- linux/mssql-tools/alpine/Dockerfile | 35 +++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 linux/mssql-tools/alpine/Dockerfile diff --git a/linux/mssql-tools/alpine/Dockerfile b/linux/mssql-tools/alpine/Dockerfile new file mode 100644 index 00000000..dad946eb --- /dev/null +++ b/linux/mssql-tools/alpine/Dockerfile @@ -0,0 +1,35 @@ +# Builder +FROM alpine:3.8 AS BUILDER + +WORKDIR /tmp + +RUN apk update +RUN apk add --no-cache curl \ + build-base \ + unixodbc-dev \ + unixodbc \ + freetds-dev \ + gnupg + +RUN curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.apk \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.apk \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.sig \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.sig + +RUN https://packages.microsoft.com/keys/microsoft.asc | gpg --import - \ + && gpg --verify msodbcsql17_17.6.1.1-1_amd64.sig msodbcsql17_17.6.1.1-1_amd64.apk \ + && gpg --verify mssql-tools_17.6.1.1-1_amd64.sig mssql-tools_17.6.1.1-1_amd64.apk + +RUN apk add --allow-untrusted msodbcsql17_17.6.1.1-1_amd64.apk \ + &&apk add --allow-untrusted mssql-tools_17.6.1.1-1_amd64.apk + + +RUN rm -rf /var/cache/apk/* + +# Application +FROM alpine:3.8 AS APP +WORKDIR /app +ENV TZ UTC +RUN apk add --no-cache bash tzdata + +ENTRYPOINT [ "bash" ] \ No newline at end of file From c291c9b40215519480b75d442ed220664cd5d153 Mon Sep 17 00:00:00 2001 From: Moz Date: Fri, 9 Oct 2020 13:49:25 -0300 Subject: [PATCH 2/2] Why not Alpine? --- linux/mssql-tools/alpine/Dockerfile | 68 ++++++++++++++--------------- 1 file changed, 34 insertions(+), 34 deletions(-) diff --git a/linux/mssql-tools/alpine/Dockerfile b/linux/mssql-tools/alpine/Dockerfile index dad946eb..5bd4663a 100644 --- a/linux/mssql-tools/alpine/Dockerfile +++ b/linux/mssql-tools/alpine/Dockerfile @@ -1,35 +1,35 @@ -# Builder -FROM alpine:3.8 AS BUILDER - -WORKDIR /tmp - -RUN apk update -RUN apk add --no-cache curl \ - build-base \ - unixodbc-dev \ - unixodbc \ - freetds-dev \ - gnupg - -RUN curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.apk \ - && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.apk \ - && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.sig \ - && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.sig - -RUN https://packages.microsoft.com/keys/microsoft.asc | gpg --import - \ - && gpg --verify msodbcsql17_17.6.1.1-1_amd64.sig msodbcsql17_17.6.1.1-1_amd64.apk \ - && gpg --verify mssql-tools_17.6.1.1-1_amd64.sig mssql-tools_17.6.1.1-1_amd64.apk - -RUN apk add --allow-untrusted msodbcsql17_17.6.1.1-1_amd64.apk \ - &&apk add --allow-untrusted mssql-tools_17.6.1.1-1_amd64.apk - - -RUN rm -rf /var/cache/apk/* - -# Application -FROM alpine:3.8 AS APP -WORKDIR /app -ENV TZ UTC -RUN apk add --no-cache bash tzdata - +# Builder +FROM alpine:3.8 AS BUILDER + +WORKDIR /tmp + +RUN apk update +RUN apk add --no-cache curl \ + build-base \ + unixodbc-dev \ + unixodbc \ + freetds-dev \ + gnupg + +RUN curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.apk \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.apk \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/msodbcsql17_17.6.1.1-1_amd64.sig \ + && curl -O https://download.microsoft.com/download/e/4/e/e4e67866-dffd-428c-aac7-8d28ddafb39b/mssql-tools_17.6.1.1-1_amd64.sig + +RUN https://packages.microsoft.com/keys/microsoft.asc | gpg --import - \ + && gpg --verify msodbcsql17_17.6.1.1-1_amd64.sig msodbcsql17_17.6.1.1-1_amd64.apk \ + && gpg --verify mssql-tools_17.6.1.1-1_amd64.sig mssql-tools_17.6.1.1-1_amd64.apk + +RUN apk add --allow-untrusted msodbcsql17_17.6.1.1-1_amd64.apk \ + &&apk add --allow-untrusted mssql-tools_17.6.1.1-1_amd64.apk + + +RUN rm -rf /var/cache/apk/* + +# Application +FROM alpine:3.8 AS APP +WORKDIR /app +ENV TZ UTC +RUN apk add --no-cache bash tzdata + ENTRYPOINT [ "bash" ] \ No newline at end of file