Use Alpine php Docker image instead

[mfilotto]

It would be great to reduce image size and get rid of so many vulnerabilities contained in php:7 by using an alpine base image

[mfilotto]

FROM php:7

RUN apt-get update && apt-get install -y unzip && rm -rf /var/lib/apt/lists/*

would become

FROM php:7-alpine

RUN apk add --no-cache unzip

[onigoetz]

Hello,

yes sure I could have a look at that.

Just out of curiosity, do you have a link on the vulnerabilities you mention on the main docker image ?

[mfilotto]

Hello,
Oh thanks.
It can been seen directly on Docker Hub or Docker store.
Go on tags page of the official php image.
You could have to try more than once as the scan results do not show up all the time.
You can also scan with clair on your laptop

[mfilotto]

Here are the links

• Tags list from Docker Hub
• Tags list from Docker Store

Vulnerabilities detailed:

• Detail for php:7
• Detail for php:7-alpine

[onigoetz]

Hi, I made the change and pushed to master, the image should build soon