Skip to content

Conversation

@ab295382
Copy link
Member

@ab295382 ab295382 commented Jan 21, 2026

Make sure you have checked all steps below.

Issue

Tests

  • My PR adds the following tests based on our test strategy OR does not need testing for this extremely good reason:
    • MyUnitTest

Documentation

  • In case of new functionality, my PR adds documentation that describes how to use it, or I have linked to a
    separate issue for that below.
  • If I have added new Java code, I have added Javadoc that explains it following our conventions and style.
  • If I have added or removed any dependencies from the project, I have updated the NOTICES file.

…urity-updates-and-clear-apt-cache-in-state-store-committer-dockerfile
@ab295382
Copy link
Member Author

I found the following also need updating.
./java/bulk-import/bulk-import-eks/docker/eks-native/Dockerfile
./java/system-test/system-test-data-generation/docker/Dockerfile
./scripts/cli/builder/Dockerfile
./scripts/cli/environment/Dockerfile
./scripts/cli/runner/Dockerfile
./scripts/trino/Dockerfile

…urity-updates-and-clear-apt-cache-in-state-store-committer-dockerfile
…urity-updates-and-clear-apt-cache-in-state-store-committer-dockerfile
@ab295382 ab295382 marked this pull request as ready for review January 28, 2026 09:08
ab295382 and others added 2 commits January 28, 2026 09:08
RUN yum install -y libzstd shadow-utils.x86_64
RUN yum -y update-minimal --security --sec-severity=Critical,Important && \
yum install -y libzstd shadow-utils.x86_64 && \
yum clean all && rm -rf /var/cache/yum
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did you test this manually? We haven't used this Dockerfile in quite a while, does it build?


# Install Amazon Corretto JDK
RUN apt-get update && apt-get install -y \
RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why the --no-install-recommends? I'm not sure what the impact will be, can you see what's different in the output?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't match the other ECS Dockerfiles. Please can we keep the commands identical between all of them?

That includes:

  • java/compaction/compaction-job-execution/docker/Dockerfile
  • java/ingest/ingest-runner/docker/Dockerfile
  • java/bulk-export/bulk-export-task-execution/docker/Dockerfile
  • java/system-test/system-test-data-generation/docker/Dockerfile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Apply security updates and clear APT cache in state store committer Dockerfile

3 participants