StarlingX build source tree root
Go to file
Davlet Panech 4d24fa8186 stx-debian: don't install unmanaged DEBs
Don't install packages from debian.org snapshots repository in the base
image. Such packages are inherited into every container that inherits
from stx-debian, and they trigger CVE scanners. Many derived containers
don't need them.

Specifically:
* Remove "build-essentials" - a meta package with many dependencies
  (build tools)
* Instal "ca-certificates" from the managed repository (ie one created
  from the download lists in starlingx/tools).

TESTS
=============================
* Build all packages
* Build stx-debian
* Build all starlingx and openstack containers

This change causes build failures addressed by a separate review linked
below.

Story: 2011159
Task: 50404

Depends-On: https://review.opendev.org/c/starlingx/utilities/+/922468
Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I9764ca475579d43cb63de6507cb90a9c3d4f698f
2024-06-21 08:22:44 -04:00
build-data Switch build avoidance from cgcs-tis-repo to local-repo 2020-10-14 10:28:23 -04:00
build-tools stx-debian: don't install unmanaged DEBs 2024-06-21 08:22:44 -04:00
stx Cleanup .gitignore for app-rook-ceph 2024-04-09 19:28:32 +00:00
.gitignore Add public-keys/ to .gitignore 2023-02-14 16:36:01 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:52:37 +00:00
.zuul.yaml Fix github mirroring for this repo 2023-04-28 12:38:49 -04:00
LICENSE StarlingX open source release updates 2018-06-01 07:45:23 -07:00
test-requirements.txt Update tests to new default 2018-06-08 20:09:47 -05:00
tox.ini Update tox.ini to work with tox 4 2022-12-26 21:12:47 +00:00