highperfocused/danswer
1
0
Fork 0
mirror of https://github.com/danswer-ai/danswer.git synced 2025-06-24 06:50:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove tornado key + remove nodejs once copied into playwright + remove old semver module (#402)

Browse Source
This commit is contained in:
Chris Weaver 2023-09-05 19:18:35 -07:00 committed by GitHub
parent b06e53a51e
commit 630386c8c4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
backend/Dockerfile
View File

@ -29,12 +29,19 @@ RUN apt-get update
RUN apt-get install nodejs -y RUN apt-get install nodejs -y
# replace nodejs packaged with playwright (18.17.0) with the one installed above # replace nodejs packaged with playwright (18.17.0) with the one installed above
RUN cp /usr/bin/node /usr/local/lib/python3.11/site-packages/playwright/driver/node RUN cp /usr/bin/node /usr/local/lib/python3.11/site-packages/playwright/driver/node
# remove nodejs (except for the binary we moved into playwright)
RUN apt-get remove -y nodejs
# Cleanup for CVEs and size reduction # Cleanup for CVEs and size reduction
RUN apt-get remove -y linux-libc-dev \ RUN apt-get remove -y linux-libc-dev \
&& apt-get autoremove -y \ && apt-get autoremove -y \
&& rm -rf /var/lib/apt/lists/* && rm -rf /var/lib/apt/lists/*
# Remove tornado test key to placate vulnerability scanners
# More details can be found here:
# https://github.com/tornadoweb/tornado/issues/3107
RUN rm /usr/local/lib/python3.11/site-packages/tornado/test/test.key
WORKDIR /app WORKDIR /app
COPY ./danswer /app/danswer COPY ./danswer /app/danswer
COPY ./alembic /app/alembic COPY ./alembic /app/alembic

5
web/Dockerfile
View File

@ -39,6 +39,11 @@ RUN npm run build
FROM base AS runner FROM base AS runner
WORKDIR /app WORKDIR /app
# Remove global node modules, since they are not needed by the actual app
# (all dependencies are copied over into the `/app` dir itself). These
# global modules may be outdated and trigger security scans.
RUN rm -rf /usr/local/lib/node_modules
# Not needed, set by compose # Not needed, set by compose
# ENV NODE_ENV production # ENV NODE_ENV production