SHA-based base image, 'nobody' user, and private keys cleanup for Docker image - Githubissues

mesosphere / spark-build

Used to build the mesosphere/spark docker image and the DC/OS Spark package

52 stars 34 forks source link

SHA-based base image, 'nobody' user, and private keys cleanup for Docker image #453

Closed akirillov closed 6 years ago

akirillov commented 6 years ago

What changes were proposed in this pull request?

Resolves DCOS-45167

switch to SHA instead of a tag for the base image
user nobody is added to Spark Docker image
/usr/share/doc is removed fully because it contains private keys which fail twistlock checks
multiple similar RUN steps are combined to minimize the amount of layers in the image

How were these changes tested?

Integration tests from mesosphere/spark-build

Release Notes

switch to SHA instead of a tag for the base Ubuntu 18.04 image
nobody is used as a default non-root user in Spark Docker image
unused/example private keys causing Twistlock checks failures removed
Docker image is optimized to contain fewer layers