open-git/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2025-12-06 11:33:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

Litellm chainguard fixes 12 02 2025 p1 (#17406)

Browse Source 
* build: update dockerfile non root

* build: update build

* build: update non root

* build: dockerfile fixes

* build: ensure dockerfile + dockerfile.database also work
This commit is contained in:
Krish Dholakia
2025-12-02 22:50:13 -08:00
committed by GitHub
parent 1ac2655b17
commit 74ba18df55
3 changed files with 19 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
Dockerfile
View File

@@ -1,8 +1,8 @@
# Base image for building # Base image for building
ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base
# Runtime image # Runtime image
ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base
# Builder stage # Builder stage
FROM $LITELLM_BUILD_IMAGE AS builder FROM $LITELLM_BUILD_IMAGE AS builder
@@ -12,11 +12,9 @@ WORKDIR /app
USER root USER root
# Install build dependencies # Install build dependencies
RUN apk add --no-cache gcc python3-dev openssl openssl-dev RUN apk add --no-cache bash gcc py3-pip python3 python3-dev openssl openssl-dev
RUN python -m pip install build
RUN pip install --upgrade pip>=24.3.1 && \
pip install build
# Copy the current directory contents into the container at /app # Copy the current directory contents into the container at /app
COPY . . COPY . .
@@ -48,10 +46,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
USER root USER root
# Install runtime dependencies # Install runtime dependencies
RUN apk add --no-cache openssl tzdata nodejs npm RUN apk add --no-cache bash openssl tzdata nodejs npm python3 py3-pip
# Upgrade pip to fix CVE-2025-8869
RUN pip install --upgrade pip>=24.3.1
WORKDIR /app WORKDIR /app
# Copy the current directory contents into the container at /app # Copy the current directory contents into the container at /app

16
docker/Dockerfile.database
View File

@@ -1,8 +1,8 @@
# Base image for building # Base image for building
ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base
# Runtime image # Runtime image
ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base
# Builder stage # Builder stage
FROM $LITELLM_BUILD_IMAGE AS builder FROM $LITELLM_BUILD_IMAGE AS builder
@@ -13,13 +13,15 @@ USER root
# Install build dependencies # Install build dependencies
RUN apk add --no-cache \ RUN apk add --no-cache \
build-base \ bash \
gcc \
py3-pip \
python3 \
python3-dev \ python3-dev \
openssl \
openssl-dev openssl-dev
RUN python -m pip install build
RUN pip install --upgrade pip && \
pip install build
# Copy the current directory contents into the container at /app # Copy the current directory contents into the container at /app
COPY . . COPY . .
@@ -46,7 +48,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
USER root USER root
# Install runtime dependencies # Install runtime dependencies
RUN apk add --no-cache openssl RUN apk add --no-cache bash openssl tzdata nodejs npm python3 py3-pip
WORKDIR /app WORKDIR /app
# Copy the current directory contents into the container at /app # Copy the current directory contents into the container at /app

8
docker/Dockerfile.non_root
View File

@@ -1,6 +1,6 @@
# Base images # Base images
ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base
ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/python:latest-dev ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base
# ----------------- # -----------------
# Builder Stage # Builder Stage
@@ -11,6 +11,8 @@ WORKDIR /app
# Install build dependencies including Node.js for UI build # Install build dependencies including Node.js for UI build
USER root USER root
RUN apk add --no-cache \ RUN apk add --no-cache \
python3 \
py3-pip \
clang \ clang \
llvm \ llvm \
lld \ lld \
@@ -71,7 +73,7 @@ WORKDIR /app
# Install runtime dependencies # Install runtime dependencies
USER root USER root
RUN apk upgrade --no-cache && \ RUN apk upgrade --no-cache && \
apk add --no-cache bash libstdc++ ca-certificates openssl supervisor apk add --no-cache python3 py3-pip bash openssl tzdata nodejs npm supervisor
# Copy only necessary artifacts from builder stage for runtime # Copy only necessary artifacts from builder stage for runtime
COPY . . COPY . .