istio.io/istio@v0.0.0-20240520182934-d79c90f27776/docker/Dockerfile.distroless (about)

     1  # prepare a distroless source context to copy files from
     2  FROM cgr.dev/chainguard/static@sha256:873e9709e2a83acc995ff24e71c100480f9c0368e0d86eaee9c3c7cb8fb5f0e0 as distroless_source
     3  
     4  # prepare a base dev to modify file contents
     5  FROM ubuntu:noble as ubuntu_source
     6  
     7  # Modify contents of container
     8  COPY --from=distroless_source /etc/ /home/etc
     9  COPY --from=distroless_source /home/nonroot /home/nonroot
    10  RUN echo istio-proxy:x:1337: >> /home/etc/group
    11  RUN echo istio-proxy:x:1337:1337:istio-proxy:/nonexistent:/sbin/nologin >> /home/etc/passwd
    12  
    13  # Customize distroless with the following:
    14  # - password file
    15  # - groups file
    16  # - /home/nonroot directory
    17  FROM distroless_source
    18  COPY --from=ubuntu_source /home/etc/passwd /etc/passwd
    19  COPY --from=ubuntu_source /home/etc/group /etc/group
    20  COPY --from=ubuntu_source /home/nonroot /home/nonroot