explicitly enable baseos and appstream repos only

opendatahub-io · Aug 2, 2024 · fdac4ed · fdac4ed
1 parent 26f2eb1
commit fdac4ed
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -17,7 +17,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOFLAGS=-mod=mod go build -a -o manager ./cmd/manag
 
 # Use distroless as minimal base image to package the manager binary
 FROM registry.access.redhat.com/ubi8/ubi-minimal:latest
-RUN microdnf install -y shadow-utils && \ 
+RUN microdnf install -y --disablerepo=* --enablerepo=ubi-8-baseos-rpms shadow-utils && \
     microdnf clean all && \ 
     useradd kserve -m -u 1000
 RUN microdnf remove -y shadow-utils

diff --git a/agent.Dockerfile b/agent.Dockerfile
@@ -18,7 +18,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOFLAGS=-mod=mod go build -a -o agent ./cmd/agent
 # Copy the inference-agent into a thin image
 FROM registry.access.redhat.com/ubi8/ubi-minimal:latest
 
-RUN microdnf install -y shadow-utils && \ 
+RUN microdnf install -y --disablerepo=* --enablerepo=ubi-8-baseos-rpms shadow-utils && \
     microdnf clean all && \ 
     useradd kserve -m -u 1000
 RUN microdnf remove -y shadow-utils

diff --git a/python/storage-initializer.Dockerfile b/python/storage-initializer.Dockerfile
@@ -4,7 +4,7 @@ ARG VENV_PATH=/prod_venv
 FROM registry.access.redhat.com/ubi8/ubi-minimal:latest as builder
 
 # Install Python and dependencies
-RUN microdnf install -y python39 python39-devel gcc libffi-devel openssl-devel krb5-workstation krb5-libs && microdnf clean all
+RUN microdnf install -y --disablerepo=* --enablerepo=ubi-8-baseos-rpms --enablerepo=ubi-8-appstream-rpms python39 python39-devel gcc libffi-devel openssl-devel krb5-workstation krb5-libs && microdnf clean all
 
 # Install Poetry
 ARG POETRY_HOME=/opt/poetry
@@ -37,7 +37,7 @@ ARG VENV_PATH
 ENV VIRTUAL_ENV=${VENV_PATH}
 ENV PATH="$VIRTUAL_ENV/bin:$PATH"
 
-RUN microdnf install -y shadow-utils python39 python39-devel && \
+RUN microdnf install -y --disablerepo=* --enablerepo=ubi-8-baseos-rpms --enablerepo=ubi-8-appstream-rpms shadow-utils python39 python39-devel && \
     microdnf clean all
 RUN useradd kserve -m -u 1000 -d /home/kserve
 

diff --git a/router.Dockerfile b/router.Dockerfile
@@ -17,7 +17,7 @@ RUN CGO_ENABLED=0  go build -a -o router ./cmd/router
 
 # Copy the inference-router into a thin image
 FROM registry.access.redhat.com/ubi8/ubi-minimal:latest
-RUN microdnf install -y shadow-utils && \ 
+RUN microdnf install -y --disablerepo=* --enablerepo=ubi-8-baseos-rpms shadow-utils && \
     microdnf clean all && \ 
     useradd kserve -m -u 1000
 RUN microdnf remove -y shadow-utils