Skip to content

SOLR-17353 Remove gosu binary from the Docker image#4285

Merged
janhoy merged 2 commits intoapache:mainfrom
janhoy:SOLR-17353-remove-gosu-from-docker
Apr 16, 2026
Merged

SOLR-17353 Remove gosu binary from the Docker image#4285
janhoy merged 2 commits intoapache:mainfrom
janhoy:SOLR-17353-remove-gosu-from-docker

Conversation

@janhoy
Copy link
Copy Markdown
Contributor

@janhoy janhoy commented Apr 15, 2026

https://issues.apache.org/jira/browse/SOLR-17353

Removes the gosu binary from the Solr Docker image. gosu is a privilege-dropping helper that was installed in the image but is not used by Solr's own Docker scripts (docker-entrypoint.sh). Removing it reduces the image's attack surface
and eliminates an unnecessary dependency.

Changes

  • Dockerfile.body.template: removed gosu from the apt-get install line
  • solr/docker/tests/cases/gosu/: deleted the test that validated gosu was present and functional in the image
  • major-changes-in-solr-10.adoc: added a Docker section under the Solr 10.1 upgrade notes describing the removal and migration options
  • changelog/unreleased/SOLR-17353-remove-gosu-from-docker.yml: changelog entry for this removal

In the release note, we point to three alternative tools that are already present in solr's image that can do the same thing.

Supercedes #4273 which tried to upgrade gosu

@github-actions github-actions bot added documentation Improvements or additions to documentation docker Docker image labels Apr 15, 2026
@janhoy janhoy requested review from HoustonPutman and malliaridis and removed request for rahulgoswami April 15, 2026 12:08

This comment was marked as resolved.

@janhoy janhoy merged commit a1df852 into apache:main Apr 16, 2026
5 of 6 checks passed
@janhoy janhoy deleted the SOLR-17353-remove-gosu-from-docker branch April 16, 2026 11:51
janhoy added a commit that referenced this pull request Apr 16, 2026
janhoy added a commit to janhoy/solr that referenced this pull request Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docker Docker image documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants