root/build-tools
Davlet Panech 4d24fa8186 stx-debian: don't install unmanaged DEBs
Don't install packages from debian.org snapshots repository in the base
image. Such packages are inherited into every container that inherits
from stx-debian, and they trigger CVE scanners. Many derived containers
don't need them.

Specifically:
* Remove "build-essentials" - a meta package with many dependencies
  (build tools)
* Instal "ca-certificates" from the managed repository (ie one created
  from the download lists in starlingx/tools).

TESTS
=============================
* Build all packages
* Build stx-debian
* Build all starlingx and openstack containers

This change causes build failures addressed by a separate review linked
below.

Story: 2011159
Task: 50404

Depends-On: https://review.opendev.org/c/starlingx/utilities/+/922468
Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I9764ca475579d43cb63de6507cb90a9c3d4f698f
2024-06-21 08:22:44 -04:00
..
2018-06-27 13:04:02 -04:00
2018-09-17 16:41:31 -04:00
2018-09-17 16:41:31 -04:00
2018-06-01 07:45:23 -07:00
2021-02-19 12:33:58 -05:00
2022-04-11 09:25:08 -04:00
2018-09-07 14:44:37 -04:00
2018-09-07 14:44:37 -04:00
2020-06-08 16:54:14 +08:00
2023-12-01 15:21:13 -05:00
2022-05-10 17:09:08 -04:00