openobserve

mirror of https://github.com/openobserve/openobserve.git synced 2026-11-03 16:10:21 +00:00

Files

T

Sangharsh Agarwal 74449c2332 fix: collapse apt-get layers and clean cache in Dockerfile and Dockerfile.amd64 (#13633 )

## Summary

Fixes three Dockerfile best practice issues in `Dockerfile` and
`Dockerfile.amd64` runtime stages. `Dockerfile.pr` already follows the
correct pattern — this brings the other two files in line with it.

## Why

**Split `RUN` apt-get layers (cache invalidation bug):**
The runtime stage ran `apt-get update` and `apt-get install` in separate
`RUN` instructions. Docker caches each layer independently, so `apt-get
update` can be cached while `apt-get install` runs fresh — resulting in
stale package indexes and potentially inconsistent installs. This is
[explicitly called
out](https://docs.docker.com/build/building/best-practices/#apt-get) in
Docker's official best practices.

**Missing `--no-install-recommends`:**
The second `apt-get install` was missing `--no-install-recommends`,
pulling in unnecessary recommended packages and bloating the image.

**apt cache left in image:**
No `rm -rf /var/lib/apt/lists/*` after the install, leaving the package
index cache in the final image unnecessarily.

## What changed

Both `Dockerfile` and `Dockerfile.amd64` runtime stages: collapsed three
separate `RUN` instructions into one, added `--no-install-recommends`,
and added `rm -rf /var/lib/apt/lists/*` to clean the apt cache.

**Before:**
```dockerfile
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates
RUN apt-get install -y curl htop iftop sysstat procps lsof net-tools
RUN update-ca-certificates
```

**After:**
```dockerfile
RUN apt-get update && \
    apt-get install -y --no-install-recommends \
      ca-certificates curl htop iftop sysstat procps lsof net-tools && \
    update-ca-certificates && \
    rm -rf /var/lib/apt/lists/*
```

No changes to installed packages, build stages, base images, or any
other files.

2026-08-07 06:46:46 +00:00

buildspec-arm.yml

ci: update docker token (#13184 )

2026-07-14 20:26:15 +08:00

buildspec-profiling.yml

feat: add configurable batch size for file list deletion (#9264 )

2025-11-24 16:42:12 +08:00

buildspec-tag-amd64.yml

ci: update docker token (#13184 )

2026-07-14 20:26:15 +08:00

buildspec-tag-arm64-pi.yml

ci: update docker token (#13184 )