yosifkit
commented
1 month ago To which apt-installed dependencies are you referring to in the final image? The Dockerfile goes to great lengths to ensure that only packages that are linked to are kept after building haproxy, so things like gcc and make are definitely removed:
To minimize the size of the image we probably want to build haproxy in one container and then copy the build outputs into the next container. This way the build tools are not in the haproxy container (smaller/safer image).
https://docs.docker.com/build/building/multi-stage/ https://github.com/b4tman/docker-squid/blob/master/Dockerfile