Use busybox from alpine

prometheus · Oct 19, 2022 · a96036a · a96036a
1 parent 915c856
commit a96036a
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/glibc/Dockerfile b/glibc/Dockerfile
@@ -29,7 +29,14 @@ RUN set -x \
         fi; \
     done
 
+FROM        ${ARCH}alpine:latest as alpine
+
 FROM        ${ARCH}busybox:glibc
 MAINTAINER  The Prometheus Authors <[email protected]>
 
+# Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities
+RUN rm /bin/*
+COPY --from=alpine /bin/busybox /bin/
+RUN /bin/busybox --install /bin
+
 COPY --from=0 /rootfs /
diff --git a/uclibc/Dockerfile b/uclibc/Dockerfile
@@ -28,7 +28,14 @@ RUN set -x \
         fi; \
     done
 
+FROM        ${ARCH}alpine:latest as alpine
+
 FROM        ${ARCH}busybox:uclibc
 MAINTAINER  The Prometheus Authors <[email protected]>
 
+# Use the busybox executable from alpine which is generally patched more quickly for vulnerabilities
+RUN rm /bin/*
+COPY --from=alpine /bin/busybox /bin/
+RUN /bin/busybox --install /bin
+
 COPY --from=0 /rootfs /