working ig

duo-authproxy/Dockerfile

@@ -1,5 +1,11 @@
 # Duo publishes no official image; build from their source tarball.
 # Install flags match Duo's documented non-interactive install.
+#
+# Slimming option: switch BOTH stages to debian:bookworm-slim (~80MB less,
+# and the base layer is shared with the openvpn image). Both must move
+# together — the proxy links against the builder's glibc. Alpine/musl
+# will not work.
+#FROM debian:bookworm-slim AS build
 
 FROM ubuntu:24.04 AS build
 
@@ -20,6 +26,8 @@ RUN groupadd -r -g 35505 duo \
  && ./install --install-dir /opt/duoauthproxy --service-user duo \
       --log-group duo --create-init-script no --enable-selinux no
 
+# Slim variant (must match the build stage base — see note above):
+#FROM debian:bookworm-slim
 FROM ubuntu:24.04
 
 # gettext-base = envsubst for rendering authproxy.cfg from env vars