zalando / spilo

Highly available elephant herd: HA PostgreSQL cluster using Docker
Apache License 2.0
1.53k stars 382 forks source link

move all dep build to dependencies-builder in dockerfile #870

Closed zlcnju closed 1 year ago

zlcnju commented 1 year ago

Although the dependencies-builder is included in the Dockerfile link, there are some builds present in the base.sh script link. These builds may introduce unnecessary packages, potentially exposing security vulnerabilities. I'm curious to know the reasons behind not consolidating all the builds in the dependencies-builder.

hughcapet commented 1 year ago

There is cleanup done in base.sh. But if you suppose something should and can be moved across stages, you are welcome to submit a PR providing these changes