diff --git a/Dockerfile b/Dockerfile index 4fea996483648f7f43f6b4e02693425d2e11a2ec..075e77758a8fc5e5c44104d9e98eb9793332cb96 100644 --- a/Dockerfile +++ b/Dockerfile @@ -83,7 +83,24 @@ COPY --from=builder /usr/local/sbin/conntrack /usr/local/sbin/conntrack ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin RUN dnf upgrade -y && \ - dnf install -y iptables ipset kmod && \ + dnf install -y ipset iputils net-tools kmod procps iproute kmod iptables && \ + dnf install -y which findutils && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/iptables-restore && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/iptables-save && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/iptables-legacy && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/iptables-legacy-restore && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/iptables-legacy-save && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/ip6tables-legacy && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/ip6tables-legacy-restore && \ + ln -fs /usr/sbin/xtables-legacy-multi /usr/sbin/ip6tables-legacy-save && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/iptables-nft && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/iptables-nft-restore && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/iptables-nft-save && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/ip6tables-nft && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/ip6tables-nft-restore && \ + ln -fs /usr/sbin/xtables-nft-multi /usr/sbin/ip6tables-nft-save && \ + alternatives --install /usr/sbin/iptables iptables /usr/sbin/iptables-legacy 1 && \ + alternatives --install /usr/sbin/ip6tables ip6tables /usr/sbin/ip6tables-legacy 1 && \ dnf clean all && \ rm -rf /var/cache/dnf diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index e52cfc1774abe5f096af74189e1df9f285760036..816982722241d2c3a078c1ffbe35f25732d033d5 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -8,7 +8,7 @@ name: "opensource/kubernetes-1.18/kube-proxy-1.18" # The most specific version should be the first tag and will be shown # on ironbank.dsop.io tags: -- "v1.18.16" +- "v1.18.17" - "latest" # Build args passed to Dockerfile ARGs @@ -27,7 +27,7 @@ labels: org.opencontainers.image.url: "https://kubernetes.io/" ## Name of the distributing entity, organization or individual org.opencontainers.image.vendor: "opensource" - org.opencontainers.image.version: "v1.18.16" + org.opencontainers.image.version: "v1.18.17" ## Keywords to help with search (ex. "cicd,gitops,golang") mil.dso.ironbank.image.keywords: "kubernetes" ## This value can be "opensource" or "commercial" @@ -37,11 +37,11 @@ labels: # List of resources to make available to the offline build context resources: -- url: https://github.com/kubernetes/kubernetes/archive/v1.18.16.tar.gz +- url: https://github.com/kubernetes/kubernetes/archive/v1.18.17.tar.gz filename: kubernetes.tar.gz validation: type: sha256 - value: 8c5b0376e330322715ede38b5d8b319cb0115669381431dfdfe4015693bccfd8 + value: 1dd9828185933c7dc89fd917bae7df6dd536d678e4c02a1349d88c9c97e15e89 - filename: texinfo.tar.gz url: "https://ftp.gnu.org/gnu/texinfo/texinfo-6.7.tar.gz" validation: