From 8a1e6ddcc16111ad387cc98f4108786bda62b1e1 Mon Sep 17 00:00:00 2001
From: Jeff Cantrill <jcantril@redhat.com>
Date: Wed, 26 Aug 2026 10:42:35 -0400
Subject: [PATCH] feat(Dockerfile): modify base to use ubi-micro to reduce
 attack vectors

---
 Dockerfile     | 5 +++--
 Dockerfile.art | 4 +++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b4deb9c75..ea0dab12d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,10 +17,11 @@ COPY ./must-gather ./must-gather
 USER 0
 RUN make build
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal
+FROM registry.access.redhat.com/ubi9/ubi-micro
 
 RUN INSTALL_PKGS=" \
-      openssl \
+      openssl-libs \
+      ca-certificates \
       rsync \
       file \
       xz \
diff --git a/Dockerfile.art b/Dockerfile.art
index 17088c929..f0549de43 100644
--- a/Dockerfile.art
+++ b/Dockerfile.art
@@ -8,9 +8,11 @@ WORKDIR /opt/app-root/src
 
 RUN make build BUILD_OPTS="-tags strictfipsruntime"
 
-FROM registry.redhat.io/ubi9/ubi-minimal:9.7
+FROM registry.redhat.io/ubi9/ubi-micro:9.7
 
 RUN INSTALL_PKGS=" \
+      openssl-libs \
+      ca-certificates \
       rsync \
       file \
       xz \