use debian for the builder stage to avoid issues with musl+boringcryp…

…o for fips compliant builds
splitio · Jan 24, 2024 · 130de29 · 130de29
1 parent ed4b723
commit 130de29
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 16 deletions.
diff --git a/docker/Dockerfile.proxy b/docker/Dockerfile.proxy
@@ -1,22 +1,19 @@
 # Build stage
-FROM golang:1.21.5-alpine3.19 AS builder
+FROM golang:1.21.6-bookworm AS builder
 
 ARG EXTRA_BUILD_ARGS
 ARG FIPS_MODE
 
-RUN apk add \
-    bash \
-    build-base \
-    python3 \
-    git
+RUN apt update -y
+RUN apt install -y build-essential ca-certificates python3 git
 
 WORKDIR /code
 
 COPY . .
 
 RUN if [[ "${FIPS_MODE}" = "enabled" ]]; \
-    then echo "building in standard mode"; make clean split-proxy entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; \
-    else echo "building in fips mode"; make clean split-proxy-fips entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; mv split-proxy-fips split-proxy; \
+    then echo "building in fips mode"; make clean split-proxy-fips entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; mv split-proxy-fips split-proxy; \
+    else echo "building in standard mode"; make clean split-proxy entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; \
     fi
 
 # Runner stage

diff --git a/docker/Dockerfile.synchronizer b/docker/Dockerfile.synchronizer
@@ -1,24 +1,23 @@
 # Build stage
-FROM golang:1.21.5-alpine3.19 AS builder
+FROM golang:1.21.6-bookworm AS builder
 
 ARG EXTRA_BUILD_ARGS
 ARG FIPS_MODE
 
-RUN apk add \
-    bash \
-    build-base \
-    python3 \
-    git
+RUN apt update -y
+RUN apt install -y build-essential ca-certificates python3 git
 
 WORKDIR /code
 
 COPY . .
 
 RUN if [[ "${FIPS_MODE}" = "enabled" ]]; \
-    then echo "building in standard mode"; make clean split-sync entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; \
-    else echo "building in fips mode"; make clean split-sync-fips entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; mv split-sync-fips split-sync; \
+    then echo "building in fips mode"; make clean split-sync-fips entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; mv split-sync-fips split-sync; \
+    else echo "building in standard mode"; make clean split-sync entrypoints EXTRA_BUILD_ARGS="${EXTRA_BUILD_ARGS}"; \
     fi
 
+RUN ls -l /code
+
 # Runner stage
 FROM alpine:3.19.0 AS runner