diff --git a/WORKSPACE b/WORKSPACE index 96e928b74..cd4ff88c7 100644 --- a/WORKSPACE +++ b/WORKSPACE @@ -66,29 +66,12 @@ load( _go_image_repos() -## Pull some standard base images +## Use 'static' distroless image for all builds container_pull( - name = "alpine_linux-amd64", - digest = "sha256:cf2412cab4f40318e722d2604fa6c79b3d28a7cb37988d95ab2453577417359a", - registry = "index.docker.io", - repository = "munnerz/alpine", - tag = "3.8-amd64", -) - -container_pull( - name = "alpine_linux-arm64", - digest = "sha256:4b8a5fc687674dd11ab769b8a711acba667c752b08697a03f6ffb1f1bcd123e5", - registry = "index.docker.io", - repository = "munnerz/alpine", - tag = "3.8-arm64", -) - -container_pull( - name = "alpine_linux-arm", - digest = "sha256:185cad013588d77b0e78018b5f275a7849a63a33cd926405363825536597d9e2", - registry = "index.docker.io", - repository = "munnerz/alpine", - tag = "3.8-arm", + name = "static_base", + registry = "gcr.io", + repository = "distroless/static", + digest = "sha256:cd0679a54d2abaf3644829f5e290ad8a10688847475f570fddb9963318cf9390", ) ## Fetch helm & tiller for use in template generation and testing diff --git a/hack/def.bzl b/hack/def.bzl index 2d6899496..c0bfb3b3d 100644 --- a/hack/def.bzl +++ b/hack/def.bzl @@ -52,7 +52,7 @@ def multiarch_image( for os in goos: go_image( name = "%s.app_%s-%s" % (name, os, arch), - base = "@alpine_%s-%s//image" % (os, arch), + base = "@static_base//image", embed = [":go_default_library"], goarch = arch, goos = os, diff --git a/test/e2e/charts/pebble/BUILD.bazel b/test/e2e/charts/pebble/BUILD.bazel index 659a93149..14de7a56b 100644 --- a/test/e2e/charts/pebble/BUILD.bazel +++ b/test/e2e/charts/pebble/BUILD.bazel @@ -2,7 +2,7 @@ load("@io_bazel_rules_docker//go:image.bzl", "go_image") go_image( name = "image", - base = "@alpine_linux-amd64//image", + base = "@static_base//image", embed = ["@org_letsencrypt_pebble//cmd/pebble:go_default_library"], goarch = "amd64", goos = "linux", diff --git a/test/e2e/framework/addon/samplewebhook/sample/BUILD.bazel b/test/e2e/framework/addon/samplewebhook/sample/BUILD.bazel index b25e4df5e..28ff4a78c 100644 --- a/test/e2e/framework/addon/samplewebhook/sample/BUILD.bazel +++ b/test/e2e/framework/addon/samplewebhook/sample/BUILD.bazel @@ -3,7 +3,7 @@ load("@io_bazel_rules_docker//go:image.bzl", "go_image") go_image( name = "image", - base = "@alpine_linux-amd64//image", + base = "@static_base//image", embed = [":go_default_library"], goarch = "amd64", goos = "linux",