truss icon indicating copy to clipboard operation
truss copied to clipboard

arm build needs to have build-essential installed, remove after built

Open zhangluva opened this issue 10 months ago • 2 comments

:rocket: What

Build multiarch image for context builder

:computer: How

arm64 needs to have build-essential bundle and rustup installed. They are removed after the build.

:microscope: Testing

zhangluva avatar Apr 04 '24 15:04 zhangluva

@zhangluva what was the context for running poetry update here? I think this should be fine, but I'm a little nervous about updating all of these packages

squidarth avatar Apr 08 '24 05:04 squidarth

@zhangluva what was the context for running poetry update here? I think this should be fine, but I'm a little nervous about updating all of these packages

The build fails on a local Mac test without updating the dependencies, which suggests that regularly updating dependencies should be a standard practice. After updating, the vulnerabilities in the image decreased significantly, from 507 to 135.

zhangluva avatar Apr 08 '24 11:04 zhangluva