buildah
buildah copied to clipboard
Unexpose a port from base image
Base images sometimes promise more than what we end up actually using. In analogy to --unsetenv and --unsetlabel, I'd very much welcome an option to unexpose a port from the final image.
My use-case: a Tomcat image exposes ports for the HTTP, HTTPS and AJP protocols, but I modify the configuration to only bind on the HTTP one (and leave HTTPS to a reverse proxy).
Seems reasonable, interested in opening a PR?
I would love to, but I don't speak Go. And I'm not having the time to learn it.
A friendly reminder that this issue had no activity for 30 days.