rsp2k/headscale
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Explicitly drop apt-get clean and use dist-clean

Browse Source 
The former is a no-op in the base images (45491f2c5c/scripts/debuerreotype-minimizing-config (L87-L109)), and `apt-get dist-clean` is a safer/better version of the `rm -rf /var/lib/apt/lists/*` that keeps the cryptographic bits that help prevent downgrade attacks.
This commit is contained in:
Tianon Gravi 2025-11-11 21:46:34 -08:00 committed by nblock
parent 8394e7094a
commit 665cc44094
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Dockerfile.integration
View File

@ -8,8 +8,7 @@ ENV GOPATH /go
WORKDIR /go/src/headscale WORKDIR /go/src/headscale
RUN apt-get --update install --no-install-recommends --yes less jq sqlite3 dnsutils \ RUN apt-get --update install --no-install-recommends --yes less jq sqlite3 dnsutils \
&& rm -rf /var/lib/apt/lists/* \ && apt-get dist-clean
&& apt-get clean
RUN mkdir -p /var/run/headscale RUN mkdir -p /var/run/headscale
# Install delve debugger # Install delve debugger