mirror of
https://github.com/milvus-io/milvus.git
synced 2026-07-21 02:05:41 +00:00
- Upgrade Go from 1.24.11 to 1.24.12 to fix CVE-2025-61726 (net/url query parameter DoS) and CVE-2025-61728 (archive/zip CPU exhaustion) - Upgrade gpgv in Ubuntu Dockerfiles to fix CVE-2025-68973 (GnuPG out-of-bounds write vulnerability) Signed-off-by: Li Liu <li.liu@zilliz.com> Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
40 lines
1.3 KiB
Docker
40 lines
1.3 KiB
Docker
FROM rockylinux/rockylinux:8 as vcpkg-installer
|
|
|
|
RUN dnf -y install curl wget tar zip unzip git \
|
|
gcc gcc-c++ make cmake \
|
|
perl-IPC-Cmd perl-Digest-SHA
|
|
|
|
# install ninjia
|
|
RUN dnf -y update && \
|
|
dnf -y install dnf-plugins-core && \
|
|
dnf config-manager --set-enabled powertools && \
|
|
dnf -y install ninja-build
|
|
|
|
########################################################################################
|
|
FROM rockylinux/rockylinux:8
|
|
|
|
ARG TARGETARCH
|
|
|
|
RUN dnf install -y make cmake automake gcc gcc-c++ curl zip unzip tar git which \
|
|
libaio libuuid-devel wget python3 python3-pip \
|
|
pkg-config perl-IPC-Cmd perl-Digest-SHA libatomic libtool tzdata
|
|
|
|
# install openblas-devel texinfo ninja
|
|
RUN dnf -y update && \
|
|
dnf -y install dnf-plugins-core && \
|
|
dnf config-manager --set-enabled powertools && \
|
|
dnf -y install texinfo openblas-devel ninja-build
|
|
|
|
|
|
RUN pip3 install conan==1.64.1
|
|
RUN mkdir -p /usr/local/go && wget -qO- "https://go.dev/dl/go1.24.12.linux-$TARGETARCH.tar.gz" | tar --strip-components=1 -xz -C /usr/local/go
|
|
RUN curl https://sh.rustup.rs -sSf | \
|
|
sh -s -- --default-toolchain=1.89 -y
|
|
|
|
ENV PATH=/root/.cargo/bin:/usr/local/bin:/usr/local/go/bin:$PATH
|
|
|
|
COPY --chown=0:0 build/docker/builder/entrypoint.sh /
|
|
|
|
ENTRYPOINT [ "/entrypoint.sh" ]
|
|
CMD ["tail", "-f", "/dev/null"]
|