Use Distroless instead of Alpine

Signed-off-by: Sora Morimoto <[email protected]>
axiomhq · Aug 9, 2023 · edef102 · edef102
1 parent bdbe108
commit edef102
Showing 1 changed file with 3 additions and 8 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,14 +1,9 @@
-# Production image based on alpine.
-FROM alpine
+# Production image based on distroless.
+FROM gcr.io/distroless/static-debian11:nonroot
 LABEL maintainer="Axiom, Inc. <[email protected]>"
 
-# Upgrade packages and install ca-certificates.
-RUN apk update --no-cache && \
-    apk upgrade --no-cache && \
-    apk add --no-cache ca-certificates
-
 # Copy binary into image.
-COPY axiom-syslog-proxy /usr/bin/axiom-syslog-proxy
+COPY --chown=nonroot:nonroot axiom-syslog-proxy /usr/bin/axiom-syslog-proxy
 
 # Use the project name as working directory.
 WORKDIR /axiom-syslog-proxy