Skip to content

Commit c793daf

Browse files
benedekhslisson
authored andcommitted
fix(model-server): change the model-server base image to RedHat
Description from #92 As discussed in a meeting yesterday, in order to reduce the number of vulnerable libraries in the dockerimage, I would suggest to switch for the RedHat-based OpenJDK image. The new model-server image was working fine for our use cases. According to trivy, the openjdk:11 base image contains 323 vulnerable libs/software (UNKNOWN: 0, LOW: 123, MEDIUM: 61, HIGH: 109, CRITICAL: 30). According to trivy, the RedHat-based base image contains 97 vulnerable libs/software (UNKNOWN: 0, LOW: 52, MEDIUM: 45, HIGH: 0, CRITICAL: 0). Trivy was run on the latest modelix-model image (image ID 3d0f0ea586e4) to obtain this result. The used command was trivy image modelix/modelix-model:latest .
1 parent 2949040 commit c793daf

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

model-server/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
1-
FROM openjdk:11
1+
FROM registry.access.redhat.com/ubi8/openjdk-11:1.15-1.1682059493
22
WORKDIR /usr/modelix-model
33
EXPOSE 28101
44
COPY run-model-server.sh /usr/modelix-model/
55
COPY build/dependency-libs/ /usr/modelix-model/model-server/build/libs/
66
COPY build/libs/ /usr/modelix-model/model-server/build/libs/
7-
CMD ["./run-model-server.sh"]
7+
CMD ["./run-model-server.sh"]

0 commit comments

Comments
 (0)