From b206723cd4076b3b275d5e3f7938226b4b3ebfc6 Mon Sep 17 00:00:00 2001 From: Norm Johanson Date: Fri, 16 Oct 2026 18:43:41 +0000 Subject: [PATCH] fix: clean dnf/yum cache after libicu install in Lambda runtime images The base stage of every published Lambda runtime Dockerfile installs libicu via dnf without cleaning the package-manager cache. Because the final published image stage is FROM base, it inherits that cache layer, baking ~170 MB of dnf/yum repository metadata (solv/solvx solver caches and filelists.xml.gz) into the shipped image. Deleting the cache in a downstream layer cannot reclaim those bytes. Clean the cache in the same RUN instruction that installs libicu so the metadata never lands in the committed layer. Applied across all eight published Dockerfiles (net8, net9, net10, net11 x amd64, arm64). Fixes #2594 --- LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile | 4 +++- LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile | 4 +++- 8 files changed, 24 insertions(+), 8 deletions(-) diff --git a/LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile index 267a88463..f5e6852ee 100644 --- a/LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net10 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile index ab918158c..c661c48ed 100644 --- a/LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net10 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile index b29f23e4f..4faf069ea 100644 --- a/LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net11 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile index 9ea584aad..8aeca8a5c 100644 --- a/LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net11 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile index 08eb7147a..690c239cf 100644 --- a/LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net8 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile index c4c3e557e..13a2cf891 100644 --- a/LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net8 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile index 7214034a8..8cf559828 100644 --- a/LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.x86_64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net9 ARG ASPNET_VERSION diff --git a/LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile b/LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile index 79bd7cac7..4a7f9ef81 100644 --- a/LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile +++ b/LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile @@ -8,7 +8,9 @@ ARG AMAZON_LINUX=public.ecr.aws/lambda/provided:al2023 FROM $AMAZON_LINUX AS base -RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes +RUN dnf install libicu-67.1-7.amzn2023.0.4.aarch64 --assumeyes && \ + dnf clean all && \ + rm -rf /var/cache/dnf /var/cache/yum FROM base AS builder-net9 ARG ASPNET_VERSION