Skip to content

chore: switch to shared ioplane-base image - #42

Open
dantte-lp wants to merge 16 commits into
mainfrom
chore/ioplane-base-containerfile
Open

chore: switch to shared ioplane-base image#42
dantte-lp wants to merge 16 commits into
mainfrom
chore/ioplane-base-containerfile

Conversation

@dantte-lp

Copy link
Copy Markdown
Member

Summary

  • Rewrite Containerfile as thin layer on localhost/ioplane-base:latest
  • Remove ~260 lines of duplicated base tooling
  • Update CLAUDE.md with base image reference

Test plan

  • Build base then project image
  • podman run --rm localhost/iohttpparser-dev:latest bash -c 'cmake --version && shellcheck --version'

- Rewrite Containerfile as thin layer on localhost/ioplane-base:latest
- Remove all duplicated base tooling (iohttpparser has no domain deps)
- Update CLAUDE.md with base image build instructions
@@ -1,265 +1,19 @@
FROM oraclelinux:10
# iohttpparser development image

Check failure

Code scanning / Trivy

Image user should not be 'root' High

Artifact: deploy/podman/Containerfile
Type: dockerfile
Vulnerability DS-0002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS-0002
# Build this image:
# podman build -t iohttpparser-dev:latest -f deploy/podman/Containerfile .

FROM localhost/ioplane-base:latest

Check warning

Code scanning / Trivy

':latest' tag used Medium

Artifact: deploy/podman/Containerfile
Type: dockerfile
Vulnerability DS-0001
Severity: MEDIUM
Message: Specify a tag in the 'FROM' statement for image 'localhost/ioplane-base'
Link: DS-0001
@@ -1,265 +1,19 @@
FROM oraclelinux:10
# iohttpparser development image

Check notice

Code scanning / Trivy

No HEALTHCHECK defined Low

Artifact: deploy/podman/Containerfile
Type: dockerfile
Vulnerability DS-0026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS-0026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 01ddf398d7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

# Build this image:
# podman build -t iohttpparser-dev:latest -f deploy/podman/Containerfile .

FROM localhost/ioplane-base:latest

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reference a CI-accessible base image

Changing the dev image to FROM localhost/ioplane-base:latest makes the container build depend on an image that the GitHub runners never create or pull. In this repo, CI/coverage/release all only run docker build -f deploy/podman/Containerfile . (see .github/workflows/ci.yml:22, coverage.yml:22, and release.yml:23) and do not have a preceding step to build/tag localhost/ioplane-base:latest; on Docker, localhost/... is treated as a registry-qualified reference, so these workflows will fail at the image build step.

Useful? React with 👍 / 👎.

- Add scripts/lib/common.sh (shared quality gate functions from ioplane-base)
- Rewrite quality.sh to source common.sh and use ioj_* functions
- Add shellcheck gate step
- All scripts pass shellcheck --severity=style
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants