krisf/imgur-clone
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Optimize Dockerfile: strip npm/corepack, fix Alpine CVEs

Browse Source
This commit is contained in:
krisf
2026-08-05 22:28:20 -04:00
parent f645b601e1
commit 65a137121e
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+7 -3
View File
@@ -3,13 +3,17 @@ FROM node:20-alpine
WORKDIR /app WORKDIR /app
# Fix Alpine OS CVEs: upgrade all packages first (libcrypto3, libssl3, etc.)
RUN apk update && apk upgrade --no-cache
# Install libvips build deps for sharp (removed after npm ci for smaller image) # Install libvips build deps for sharp (removed after npm ci for smaller image)
RUN apk add --no-cache build-base python3 RUN apk add --no-cache build-base python3
# Copy package files first for better layer caching # Copy package files first for better layer caching
COPY package*.json ./ COPY package*.json ./
RUN npm ci --omit=dev && \ RUN npm ci --omit=dev && \
apk del build-base python3 apk del build-base python3 && \
rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack
# Copy application code # Copy application code
COPY server.js ./ COPY server.js ./
@@ -26,5 +30,5 @@ EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD wget --no-verbose --tries=1 --spider http://localhost:3000/api/health || exit 1 CMD wget --no-verbose --tries=1 --spider http://localhost:3000/api/health || exit 1
# Start the application # Start directly with node (npm stripped to reduce attack surface)
CMD ["npm", "start"] CMD ["node", "server.js"]