gramineproject / gsc

Gramine Shielded Containers (Docker integration)
BSD 3-Clause "New" or "Revised" License
43 stars 34 forks source link

Retain `openssl` during signing in `redhat/ubi8-minimal` #188

Closed sahason closed 8 months ago

sahason commented 9 months ago

Description of the changes

Avoid uninstalling openssl during signing in redhat/ubi8-minimal. Ideally we would want to remove openssl and all its dependencies, but because of the slight differences between different openssl package versions, it is hard to do in a uniform way (as openssl installation may install additional packages). And removing openssl doesn't help with minimizing the image size too much.

Also, unlike other distros like ubuntu with apt update the microdnf update command updates and upgrades new/existing packages. The microdnf update command can be removed from templates as installing new package updates metadata and gets latest information about the package.

How to test this PR?

Follow the steps mentioned in #187 to test this PR Fixes #187


This change is Reviewable