File tree Expand file tree Collapse file tree 2 files changed +9
-3
lines changed Expand file tree Collapse file tree 2 files changed +9
-3
lines changed Original file line number Diff line number Diff line change 1
1
FROM partner-chains-node-builder:latest AS builder
2
2
3
- FROM docker.io/library/ubuntu:20.04
3
+ FROM docker.io/library/ubuntu:25.10
4
+
4
5
COPY --from=builder /partner-chains-node/docker-build/target/release/partner-chains-demo-node /usr/local/bin/partner-chains-node
5
6
6
- RUN useradd -m -u 1000 -U -s /bin/sh -d /substrate substrate && \
7
+ USER root
8
+
9
+ RUN useradd -m -u 1001 -U -s /bin/sh -d /substrate substrate && \
7
10
mkdir -p /data /substrate/.local/share/partner-chains-node && \
8
11
chown -R substrate:substrate /data && \
9
12
ln -s /data /substrate/.local/share/partner-chains-node && \
10
13
# Sanity checks
11
14
ldd /usr/local/bin/partner-chains-node && \
15
+ # Unclutter and minimize the attack surface
16
+ rm -rf /usr/bin /usr/sbin && \
17
+ # Check if executable works in this container
12
18
/usr/local/bin/partner-chains-node --version
13
19
14
20
USER substrate
Original file line number Diff line number Diff line change 1
- FROM docker.io/paritytech/ci-unified:bullseye-1.81 .0-2024-11-19-v202411281558 AS builder
1
+ FROM docker.io/paritytech/ci-unified:bullseye-1.85 .0-2025-01-28 AS builder
2
2
3
3
WORKDIR /partner-chains-node
4
4
COPY . /partner-chains-node
You can’t perform that action at this time.
0 commit comments