Skip to content

Commit

Permalink
Remove aws-cli from production image (#67)
Browse files Browse the repository at this point in the history
This is been removed for a while now in some downstream applications[1], mainly
to fix vulnerability warnings, but also we shouldn't ship things to production
that aren't actually required at runtime (particularly when not verifying the
install and pulling in a bunch of unrelated dependencies).

[1] navapbc/pfml-starter-kit-app@6b61c64
  • Loading branch information
doshitan authored Feb 4, 2025
1 parent 315596d commit e2ea148
Showing 1 changed file with 1 addition and 9 deletions.
10 changes: 1 addition & 9 deletions template/{{app_name}}/Dockerfile.jinja
Original file line number Diff line number Diff line change
Expand Up @@ -115,16 +115,8 @@ RUN apt-get update -qq \
libvips \
libyaml-dev \
postgresql-client \
python-is-python3 \
python3-venv \
unzip \
wget \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/* \
&& curl "https://s3.amazonaws.com/aws-cli/awscli-bundle.zip" -o "awscli-bundle.zip" \
&& unzip awscli-bundle.zip \
&& ./awscli-bundle/install -i /usr/local/aws -b /usr/local/bin/aws \
&& rm -rf ./awscli-bundle awscli-bundle.zip
&& rm -rf /var/lib/apt/lists/*

# Install custom db migrate script
COPY bin/db-migrate /usr/bin/
Expand Down

0 comments on commit e2ea148

Please sign in to comment.