[Interop Test] Use distroless for C++ xDS tests (#33925)

This should drastically reduce number of vulnerabilities.

Tested locally by running the test
pull/33917/head
Eugene Ostroukhov 1 year ago committed by GitHub
parent f846e11519
commit 78eb191da5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 4
      tools/dockerfile/interoptest/grpc_interop_cxx_xds/Dockerfile.xds_client
  2. 4
      tools/dockerfile/interoptest/grpc_interop_cxx_xds/Dockerfile.xds_server

@ -14,7 +14,7 @@
# Dockerfile for building //test/cpp/interop:xds_interop_client
FROM phusion/baseimage:master@sha256:e757fe8c7adcb9f798c0eb9dfff31bbf7d91538a1002031d7cdf3e5bf9cf71fc
FROM debian:11
RUN apt-get update -y && \
apt-get install -y \
@ -32,7 +32,7 @@ COPY . .
RUN tools/bazel build //test/cpp/interop:xds_interop_client
RUN cp -rL /workdir/bazel-bin/test/cpp/interop/xds_interop_client /artifacts/
FROM phusion/baseimage:master@sha256:e757fe8c7adcb9f798c0eb9dfff31bbf7d91538a1002031d7cdf3e5bf9cf71fc
FROM gcr.io/distroless/cc-debian11@sha256:b53fbf5f81f4a120a489fedff2092e6fcbeacf7863fce3e45d99cc58dc230ccc
COPY --from=0 /artifacts ./
ENV GRPC_VERBOSITY="DEBUG"

@ -14,7 +14,7 @@
# Dockerfile for building //test/cpp/interop:xds_interop_client
FROM phusion/baseimage:master@sha256:e757fe8c7adcb9f798c0eb9dfff31bbf7d91538a1002031d7cdf3e5bf9cf71fc
FROM debian:11
RUN apt-get update -y && \
apt-get install -y \
@ -32,7 +32,7 @@ COPY . .
RUN tools/bazel build //test/cpp/interop:xds_interop_server
RUN cp -rL /workdir/bazel-bin/test/cpp/interop/xds_interop_server /artifacts/
FROM phusion/baseimage:master@sha256:e757fe8c7adcb9f798c0eb9dfff31bbf7d91538a1002031d7cdf3e5bf9cf71fc
FROM gcr.io/distroless/cc-debian11@sha256:b53fbf5f81f4a120a489fedff2092e6fcbeacf7863fce3e45d99cc58dc230ccc
COPY --from=0 /artifacts ./
ENV GRPC_VERBOSITY="DEBUG"

Loading…
Cancel
Save