Use static linked busybox

glibc/Dockerfile

@@ -30,17 +30,16 @@ RUN set -x \
     done
 
 FROM        ${ARCH}alpine:latest as alpine
+RUN apk add busybox-static
 
 FROM        ${ARCH}busybox:glibc
 MAINTAINER  The Prometheus Authors <[email protected]>
 
 # Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities
-COPY --from=alpine /bin/busybox /tmp/busybox
-COPY --from=alpine /lib/ld-musl* /lib/libc.musl* /lib/
+# Use the busybox.static to avoid dynamic library dependencies.
+COPY --from=alpine /bin/busybox.static /tmp/busybox
 
-RUN cd /lib && \
-    ln -sf $(ls ld-musl*) $(ls libc.musl*) && \
-    rm /bin/* && \
+RUN rm /bin/* && \
     /tmp/busybox --install /bin && \
     mv /tmp/busybox /bin/
 

uclibc/Dockerfile

@@ -29,17 +29,16 @@ RUN set -x \
     done
 
 FROM        ${ARCH}alpine:latest as alpine
+RUN apk add busybox-static
 
 FROM        ${ARCH}busybox:uclibc
 MAINTAINER  The Prometheus Authors <[email protected]>
 
 # Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities
-COPY --from=alpine /bin/busybox /tmp/busybox
-COPY --from=alpine /lib/ld-musl* /lib/libc.musl* /lib/
+# Use the busybox.static to avoid dynamic library dependencies.
+COPY --from=alpine /bin/busybox.static /tmp/busybox
 
-RUN cd /lib && \
-    ln -sf $(ls ld-musl*) $(ls libc.musl*) && \
-    rm /bin/* && \
+RUN rm /bin/* && \
     /tmp/busybox --install /bin && \
     mv /tmp/busybox /bin/