Skip to content

chore: Docker builds now uses minimal images for light and secure footprints #6217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ntkathole merged 1 commit into from
Apr 7, 2026
Merged

chore: Docker builds now uses minimal images for light and secure footprints #6217

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion sdk/python/feast/infra/feature_servers/multicloud/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,8 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1

USER 0
RUN microdnf install -y gcc libpq-devel python3.12-devel && microdnf clean all
USER 1001

COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
ENV UV_CACHE_DIR=/tmp/uv-cache
Expand Down
15 changes: 8 additions & 7 deletions sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,15 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1

USER 0
RUN microdnf install -y npm git gcc libpq-devel python3.12-devel && microdnf clean all
RUN npm install -g yarn yalc && rm -rf .npm
USER default
USER 1001

COPY --chown=default .git ${APP_ROOT}/src/.git
COPY --chown=default pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=default protos ${APP_ROOT}/src/protos
COPY --chown=default ui ${APP_ROOT}/src/ui
COPY --chown=default sdk/python ${APP_ROOT}/src/sdk/python
COPY --chown=1001:0 .git ${APP_ROOT}/src/.git
COPY --chown=1001:0 pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=1001:0 protos ${APP_ROOT}/src/protos
COPY --chown=1001:0 ui ${APP_ROOT}/src/ui
COPY --chown=1001:0 sdk/python ${APP_ROOT}/src/sdk/python

WORKDIR ${APP_ROOT}/src/ui
RUN npm install && \
Expand Down
10 changes: 5 additions & 5 deletions sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@ FROM yarn-builder:latest

# This section only necessary when building from local feast source ... e.g. ".[minimal]"
########################
COPY --chown=default .git ${APP_ROOT}/src/.git
COPY --chown=default pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=default protos ${APP_ROOT}/src/protos
COPY --chown=default ui ${APP_ROOT}/src/ui
COPY --chown=default sdk/python ${APP_ROOT}/src/sdk/python
COPY --chown=1001:0 .git ${APP_ROOT}/src/.git
COPY --chown=1001:0 pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=1001:0 protos ${APP_ROOT}/src/protos
COPY --chown=1001:0 ui ${APP_ROOT}/src/ui
COPY --chown=1001:0 sdk/python ${APP_ROOT}/src/sdk/python

WORKDIR ${APP_ROOT}/src/ui
ENV NPM_TOKEN=
Expand Down
2 changes: 1 addition & 1 deletion sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary.release
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1

COPY requirements.txt requirements.txt
RUN source /tmp/hermeto.env && \
Expand Down
3 changes: 2 additions & 1 deletion sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yarn
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1

USER 0
RUN microdnf install -y npm git && microdnf clean all
RUN npm install -g yarn yalc && rm -rf .npm
USER 1001
4 changes: 2 additions & 2 deletions sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yum
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1
ARG RELEASE

ENV IBIS_VERSION="9.5.0"

USER 0
RUN yum install -y ninja-build llvm-devel cmake llvm-toolset ncurses-devel rust cargo
RUN microdnf install -y ninja-build llvm-devel cmake llvm-toolset ncurses-devel rust cargo npm git && microdnf clean all
RUN if [[ -z "$RELEASE" ]] ; then npm install -g yarn yalc && rm -rf .npm ; fi
USER 1001

Expand Down
13 changes: 7 additions & 6 deletions sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@ ENV THIRD_PARTY_PATH=/tmp/hermeto-generic-output/deps/generic
# unecessary for konflux build
ENV RPM_PATH=/tmp/hermeto-rpm-output/deps/rpm/x86_64
USER 0
RUN microdnf install -y shadow-utils && microdnf clean all
RUN useradd mockbuild
RUN groupadd mock
RUN usermod -G mock mockbuild
Expand Down Expand Up @@ -71,7 +72,7 @@ RUN mkdir ${APP_ROOT}/src/arrow ${ARROW_HOME} ${APP_ROOT}/src/arrow-build && \
ARROW_ZLIB_URL="${THIRD_PARTY_PATH}/zlib-1.3.1.tar.gz" \
ARROW_ZSTD_URL="${THIRD_PARTY_PATH}/zstd-1.5.6.tar.gz" \
&& \
cmake \
cmake -G Ninja \
-DCMAKE_INSTALL_PREFIX=$ARROW_HOME \
-DARROW_COMPUTE=ON \
-DARROW_ACERO=ON \
Expand Down Expand Up @@ -130,11 +131,11 @@ RUN source /tmp/hermeto.env && \

# This section only necessary when building from local feast source ... e.g. ".[minimal]"
########################
COPY --chown=default .git ${APP_ROOT}/src/.git
COPY --chown=default pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=default protos ${APP_ROOT}/src/protos
COPY --chown=default ui ${APP_ROOT}/src/ui
COPY --chown=default sdk/python ${APP_ROOT}/src/sdk/python
COPY --chown=1001:0 .git ${APP_ROOT}/src/.git
COPY --chown=1001:0 pyproject.toml README.md Makefile ${APP_ROOT}/src/
COPY --chown=1001:0 protos ${APP_ROOT}/src/protos
COPY --chown=1001:0 ui ${APP_ROOT}/src/ui
COPY --chown=1001:0 sdk/python ${APP_ROOT}/src/sdk/python

WORKDIR ${APP_ROOT}/src/ui
ENV NPM_TOKEN=
Expand Down
5 changes: 3 additions & 2 deletions sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM registry.access.redhat.com/ubi9/python-312:1
FROM registry.access.redhat.com/ubi9/python-312-minimal:1

ENV APACHE_ARROW_VERSION="17.0.0"
ENV MILVUS_LITE_VERSION="2.4.12"
Expand All @@ -13,6 +13,7 @@ ENV THIRD_PARTY_PATH=/tmp/hermeto-generic-output/deps/generic
# unecessary for konflux build
ENV RPM_PATH=/tmp/hermeto-rpm-output/deps/rpm/x86_64
USER 0
RUN microdnf install -y shadow-utils && microdnf clean all
RUN useradd mockbuild
RUN groupadd mock
RUN usermod -G mock mockbuild
Expand Down Expand Up @@ -71,7 +72,7 @@ RUN mkdir ${APP_ROOT}/src/arrow ${ARROW_HOME} ${APP_ROOT}/src/arrow-build && \
ARROW_ZLIB_URL="${THIRD_PARTY_PATH}/zlib-1.3.1.tar.gz" \
ARROW_ZSTD_URL="${THIRD_PARTY_PATH}/zstd-1.5.6.tar.gz" \
&& \
cmake \
cmake -G Ninja \
-DCMAKE_INSTALL_PREFIX=$ARROW_HOME \
-DARROW_COMPUTE=ON \
-DARROW_ACERO=ON \
Expand Down
Loading