istio.io/istio@v0.0.0-20240520182934-d79c90f27776/docker/Dockerfile.base (about)

     1  FROM ubuntu:noble
     2  
     3  ENV DEBIAN_FRONTEND=noninteractive
     4  
     5  # Do not add more stuff to this list that isn't small or critically useful.
     6  # If you occasionally need something on the container do
     7  # sudo apt-get update && apt-get whichever
     8  
     9  # hadolint ignore=DL3005,DL3008
    10  RUN apt-get update && \
    11    apt-get install --no-install-recommends -y \
    12    ca-certificates \
    13    curl \
    14    iptables \
    15    iproute2 \
    16    iputils-ping \
    17    knot-dnsutils \
    18    netcat-openbsd \
    19    tcpdump \
    20    conntrack \
    21    bsdmainutils \
    22    net-tools \
    23    lsof \
    24    sudo \
    25    && update-ca-certificates \
    26    && apt-get upgrade -y \
    27    && apt-get clean \
    28    && rm -rf  /var/log/*log /var/lib/apt/lists/* /var/log/apt/* /var/lib/dpkg/*-old /var/cache/debconf/*-old \
    29    && update-alternatives --set iptables /usr/sbin/iptables-legacy \
    30    && update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
    31  
    32  # Sudoers used to allow tcpdump and other debug utilities.
    33  RUN useradd -m --uid 1337 istio-proxy && \
    34    echo "istio-proxy ALL=NOPASSWD: ALL" >> /etc/sudoers