Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-79954

centos stream minimal images contain Python

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • None
    • CentOS Stream 10
    • containers-common
    • None
    • Yes
    • Moderate
    • rhel-container-tools
    • 3
    • None
    • None
    • None
    • None
    • None

      The minimal-flavour images traditionally do not include Python, which keeps the file size and attack surface area down. It's particularly preferred by other language runtime image downstreams to not have to carry Python in the payload.

      $ podman run --rm -ti  quay.io/centos/centos@sha256:9988cb7d26aa993e932b9ba6dd0f2a125141c09c6460955136944
      4e79c9deadd rpm -qa '*python*'
      python3-pip-wheel-23.3.2-7.el10.noarch
      python-unversioned-command-3.12.9-1.el10.noarch
      python3-3.12.9-1.el10.x86_64
      python3-libs-3.12.9-1.el10.x86_64
      python3-libdnf-0.73.1-7.el10.x86_64
      python3-hawkey-0.73.1-7.el10.x86_64
      python3-libcomps-0.1.21-3.el10.x86_64
      python3-dbus-1.3.2-8.el10.x86_64
      python3-rpm-4.19.1.1-10.el10.x86_64
      python3-dnf-4.20.0-10.el10.noarch
      python3-six-1.16.0-16.el10.noarch
      python3-dateutil-2.8.2-15.el10.noarch
      python3-systemd-235-11.el10.x86_64
      python3-dnf-plugins-core-4.7.0-8.el10.noarch
      

      where that digest is the current value of tag :stream10-minimal

      For comparison (output is empty)

      $ podman run --rm -ti registry.access.redhat.com/ubi10-beta/ubi-minimal:10.0-beta rpm -qa '*python*'
      

      Please remove Python from the minimal images.

              bstinson@redhat.com Brian Stinson
              jdowland@redhat.com Jonathan Dowland
              Container Runtime Eng Bot Container Runtime Eng Bot
              Container Runtime Bugs Bot Container Runtime Bugs Bot
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: