tvalentyn commented on code in PR #29001:
URL: https://github.com/apache/beam/pull/29001#discussion_r1384391703
##########
sdks/python/container/Dockerfile:
##########
@@ -82,6 +78,32 @@ RUN \
# Remove pip cache.
rm -rf /root/.cache/pip
+FROM gcr.io/distroless/cc-debian12 as beam
+LABEL Author "Apache Beam <[email protected]>"
+ARG TARGETOS
+ARG TARGETARCH
+
+# copy commands & libs to distroless
+COPY --from=python-base /bin /bin
Review Comment:
I think lack of `apt` is the main inconvenience for me. I think this is a
real friction point, while the vulnerabilities reported by docker image
checkers are more often than not, are not applicable to execution of Beam
pipelines.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
