[SOLR-16752] Reduce attack surface and size for Docker image

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.11
• Fix Version/s: 9.3
• Component/s: Docker
• Labels: Docker dockerfile
• Assignee: Houston Putman
• Reporter: Cuong Bui
• Created: 18/Apr/23 10:23
• Updated: 21/Jul/23 20:40
• Resolved: 19/Apr/23 15:19

Description

Hi,

I have created this issue here as a replacement for the pull request on GitHub: https://github.com/apache/solr-docker/pull/15.

To summarize, the Dockerfiles should contain the --no-install-recommends option wherever there is an apt-get install command. This should help improve the security of the container and reduce the risk of potential attacks.

In detail, the --no-install-recommends option helps remove unnecessary apt packages that are not needed for the container's functionality. This change can not only trim your image size but also reduce the attack surface.

I hope you find this information useful. Please let me know if you have any concerns.

Thank you.

Issue Links

• links to: GitHub Pull Request #1575
• links to: https://github.com/apache/solr-docker/pull/15