1
0
mirror of https://github.com/juanfont/headscale.git synced 2025-11-27 20:04:00 +01:00

Explicitly drop apt-get clean and use dist-clean

The former is a no-op in the base images (45491f2c5c/scripts/debuerreotype-minimizing-config (L87-L109)), and `apt-get dist-clean` is a safer/better version of the `rm -rf /var/lib/apt/lists/*` that keeps the cryptographic bits that help prevent downgrade attacks.
This commit is contained in:
Tianon Gravi 2025-11-11 21:46:34 -08:00 committed by nblock
parent 8394e7094a
commit 665cc44094

View File

@ -8,8 +8,7 @@ ENV GOPATH /go
WORKDIR /go/src/headscale
RUN apt-get --update install --no-install-recommends --yes less jq sqlite3 dnsutils \
&& rm -rf /var/lib/apt/lists/* \
&& apt-get clean
&& apt-get dist-clean
RUN mkdir -p /var/run/headscale
# Install delve debugger