Loongson-Cloud-Community / dockerfiles

14 stars 14 forks source link

增加nodelocaldns,触发重新构建k8s-build-image #202

Closed zhangguanzhang closed 6 months ago

qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/chage
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chsh
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/passwd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/gpasswd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chsh
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/newgrp
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/mount
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/gpasswd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/mount
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/newgrp
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chsh
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/passwd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/sbin/unix_chkpwd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/newgrp
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/wall
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/gpasswd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chfn
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/umount
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chsh
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/newgrp
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/expiry
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/gpasswd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/chsh
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/bin/expiry
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/umount
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/gpasswd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0007 FATAL Always combine 'apt-get update' with 'apt-get install upgrade' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0005 FATAL Use 'rm -rf /var/lib/apt/lists' after 'apt-get install update' : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0003 WARN Avoid dist-upgrade in container : 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setgid file: grwxr-xr-x usr/sbin/unix_chkpwd
qiangxuhui commented 6 months ago
code level alerts
CIS-DI-0001 WARN Last user should not be root
DKL-DI-0006 WARN Avoid 'latest' tag
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/bin/mount
zhangguanzhang commented 6 months ago

@qiangxuhui PTAL