diff --git a/image/db/rhel/Dockerfile b/image/db/rhel/Dockerfile index bffbfc43f..5d698f3b0 100644 --- a/image/db/rhel/Dockerfile +++ b/image/db/rhel/Dockerfile @@ -69,8 +69,11 @@ RUN microdnf upgrade -y --nobest && \ # https://access.redhat.com/solutions/5616681 microdnf reinstall -y tzdata && \ microdnf clean all && \ - # (Optional) Remove line below to keep package management utilities - rpm -e --nodeps $(rpm -qa shadow-utils curl '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ + rpm -e --nodeps $(rpm -qa shadow-utils \ + # Not needed by postgres, carry unfixable CVEs + 'libcurl*' 'vim*' \ + # Flagged by "Curl in Image" and "Red Hat Package Manager in Image" default policies + 'curl*' '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ rm -rf /var/cache/dnf /var/cache/yum /tmp/postgres-libs.rpm /tmp/postgres-server.rpm /tmp/postgres.rpm /tmp/postgres-contrib.rpm && \ localedef -f UTF-8 -i en_US en_US.UTF-8 && \ mkdir /docker-entrypoint-initdb.d diff --git a/image/db/rhel/Dockerfile.slim b/image/db/rhel/Dockerfile.slim index 8e3bb7d34..08c67ce49 100644 --- a/image/db/rhel/Dockerfile.slim +++ b/image/db/rhel/Dockerfile.slim @@ -69,8 +69,11 @@ RUN microdnf upgrade -y --nobest && \ # https://access.redhat.com/solutions/5616681 microdnf reinstall -y tzdata && \ microdnf clean all && \ - # (Optional) Remove line below to keep package management utilities - rpm -e --nodeps $(rpm -qa shadow-utils curl '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ + rpm -e --nodeps $(rpm -qa shadow-utils \ + # Not needed by postgres, carry unfixable CVEs + 'libcurl*' 'vim*' \ + # Flagged by "Curl in Image" and "Red Hat Package Manager in Image" default policies + 'curl*' '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ rm -rf /var/cache/dnf /var/cache/yum /tmp/postgres-libs.rpm /tmp/postgres-server.rpm /tmp/postgres.rpm /tmp/postgres-contrib.rpm && \ localedef -f UTF-8 -i en_US en_US.UTF-8 && \ mkdir /docker-entrypoint-initdb.d diff --git a/image/db/rhel/konflux.Dockerfile b/image/db/rhel/konflux.Dockerfile index f7a6cbba3..cd9186904 100644 --- a/image/db/rhel/konflux.Dockerfile +++ b/image/db/rhel/konflux.Dockerfile @@ -37,7 +37,11 @@ RUN localedef -f UTF-8 -i en_US en_US.UTF-8 && \ chown -R postgres:postgres /var/lib/postgresql && \ chown -R postgres:postgres /var/run/postgresql && \ dnf clean all && \ - rpm --verbose -e --nodeps $(rpm -qa curl '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ + rpm --verbose -e --nodeps $(rpm -qa \ + # Not needed by postgres, carry unfixable CVEs + 'libcurl*' 'vim*' \ + # Flagged by "Curl in Image" and "Red Hat Package Manager in Image" default policies + 'curl*' '*rpm*' '*dnf*' '*libsolv*' '*hawkey*' 'yum*') && \ rm -rf /var/cache/dnf /var/cache/yum && \ mkdir /docker-entrypoint-initdb.d