diff --git a/kbs/docker/Dockerfile.rhel-ubi b/kbs/docker/Dockerfile.rhel-ubi index e902e407e..802e92d9e 100644 --- a/kbs/docker/Dockerfile.rhel-ubi +++ b/kbs/docker/Dockerfile.rhel-ubi @@ -22,7 +22,13 @@ cargo install --locked --root /usr/local/ --path kbs/src/kbs --no-default-featur mkdir -p /root/trustee/lib64 && \ ldd /usr/local/bin/kbs | sed 's@.*\s/@/@' | sed 's/\s.*//' | xargs -I {} cp {} /root/trustee/lib64 -# Package minimal image. -FROM registry.access.redhat.com/ubi9-micro +# Package UBI image. +FROM registry.access.redhat.com/ubi9 + +# Install runtime dependencies from Intel repo. +COPY --from=builder /root/sgx_rpm_local_repo /root/sgx_rpm_local_repo +RUN dnf -y install --nogpgcheck --setopt=install_weak_deps=0 --repofrompath "sgx,file:///root/sgx_rpm_local_repo" \ +libsgx-dcap-default-qpl libsgx-dcap-quote-verify && \ +rm -rf /root/sgx_rpm_local_repo + COPY --from=builder /usr/local/bin/kbs /usr/local/bin/kbs -COPY --from=builder /root/trustee/lib64/* /lib64/