diff --git a/kms/Dockerfile b/kms/Dockerfile index 782d5774a..18fa93065 100644 --- a/kms/Dockerfile +++ b/kms/Dockerfile @@ -26,6 +26,6 @@ WORKDIR /constellation/kms/cmd ARG PROJECT_VERSION=0.0.0 RUN --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 go build -o /constellation/build/kmsserver -trimpath -buildvcs=false -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.VersionInfo=${PROJECT_VERSION}" -FROM gcr.io/distroless/static:nonroot@sha256:9ec950c09380320e203369982691eb821df6a6974edf9f4bb8e661d4b77b9d99 as release +FROM gcr.io/distroless/static:nonroot@sha256:cacb3d85a593c44e2f3998175164f0c694e475b40e639294f224062842e90724 as release COPY --from=build /constellation/build/kmsserver /kmsserver ENTRYPOINT ["/kmsserver"] diff --git a/operators/constellation-node-operator/Dockerfile b/operators/constellation-node-operator/Dockerfile index f7b54606f..c55b01dfe 100644 --- a/operators/constellation-node-operator/Dockerfile +++ b/operators/constellation-node-operator/Dockerfile @@ -20,7 +20,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager main.go # Use distroless as minimal base image to package the manager binary # Refer to https://github.com/GoogleContainerTools/distroless for more details -FROM gcr.io/distroless/static:nonroot@sha256:9ec950c09380320e203369982691eb821df6a6974edf9f4bb8e661d4b77b9d99 as release +FROM gcr.io/distroless/static:nonroot@sha256:cacb3d85a593c44e2f3998175164f0c694e475b40e639294f224062842e90724 as release WORKDIR / COPY --from=builder /workspace/manager . USER 65532:65532