-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Dba 656 #212
Dba 656 #212
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
@@ -135,7 +135,8 @@ jobs: | |||
environment: ${{needs.build_rman_target_name.outputs.TargetEnvironment}} | |||
runs-on: ubuntu-latest | |||
container: | |||
image: ghcr.io/ministryofjustice/hmpps-delius-operational-automation:0.1 | |||
image: ghcr.io/ministryofjustice/hmpps-delius-operational-automation:0.40.0 | |||
options: --user root |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What's the reason for running this job as root? The default ansible user should have all required permissions. If it doesn't we should fix it in the image
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Left over from testing, removed.
docker/delius-ansible-aws/Dockerfile
Outdated
@@ -21,7 +21,8 @@ LABEL org.opencontainers.image.authors="HMPPS Probation Webops Team (probation-w | |||
org.opencontainers.image.source="https://github.com/ministryofjustice/hmpps-delius-operational-automation" | |||
|
|||
RUN apk update --no-cache \ | |||
&& apk upgrade --no-cache | |||
&& apk upgrade --no-cache \ | |||
&& apk add gcc musl-dev python3-dev py-setuptools build-base libffi-dev openssl-dev openssh-client git make jq bash curl |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you tell me why you want to re-add all of those packages? It feels like we are adding bloat to the image.
If something really is needed we could potentially go for a subset of these?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Kept only a small number of packages
docker/delius-ansible-aws/Dockerfile
Outdated
USER ansible | ||
# USER ansible | ||
|
||
ENTRYPOINT /bin/bash |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This image is intended to simply be an ansible runner. Because of this, I don't think we should default the entry point to bash. Please correct me if I'm missing something
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Commented out.
No description provided.