[bitnami/prometheus] Release 3.10.0-debian-12-r1 (#91365)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>

bitnami/prometheus/3.10/debian-12/Dockerfile

@@ -1,34 +1,23 @@
 # Copyright Broadcom, Inc. All Rights Reserved.
 # SPDX-License-Identifier: APACHE-2.0
 
-FROM docker.io/bitnami/minideb:bookworm
+FROM docker.io/bitnami/minideb:bookworm AS builder
 
 ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
-LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-02-26T11:06:59Z" \
-      org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
-      org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/prometheus/README.md" \
-      org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/prometheus" \
-      org.opencontainers.image.title="prometheus" \
-      org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="3.10.0"
-
-ENV HOME="/" \
-    OS_ARCH="${TARGETARCH:-amd64}" \
-    OS_FLAVOUR="debian-12" \
-    OS_NAME="linux"
+ENV OS_ARCH="${TARGETARCH:-amd64}"
 
 COPY prebuildfs /
 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
+
 # Install required system packages and dependencies
-RUN install_packages ca-certificates curl procps
+RUN install_packages ca-certificates curl
 RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "prometheus-3.10.0-0-linux-${OS_ARCH}-debian-12" \
+      "prometheus-3.10.0-1-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -39,24 +28,44 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
       tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner ; \
       rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \
     done
-RUN apt-get update && apt-get upgrade -y && \
-    apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
-RUN chmod g+rwX /opt/bitnami
-RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
-RUN ln -sf /opt/bitnami/prometheus/conf /etc/prometheus
-RUN ln -sf /opt/bitnami/prometheus/data /prometheus
-RUN chown -R 1001:1001 /opt/bitnami/prometheus
+RUN mkdir -p /opt/bitnami/rootfs/opt/bitnami/prometheus/data && chmod g+rwX /opt/bitnami/rootfs/opt/bitnami/prometheus/data
 RUN uninstall_packages curl
 
-RUN mkdir -p /opt/bitnami/prometheus/data/ && chmod g+rwX /opt/bitnami/prometheus/data/
+######
+
+FROM scratch
+
+ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
+ARG TARGETARCH
+
+ENV OS_ARCH="${TARGETARCH:-amd64}"
+
+LABEL org.opencontainers.image.base.name="scratch" \
+      org.opencontainers.image.created="2026-03-06T15:13:16Z" \
+      org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
+      org.opencontainers.image.title="prometheus" \
+      org.opencontainers.image.vendor="Broadcom, Inc." \
+      org.opencontainers.image.version="3.10.0"
+
+COPY rootfs /
+COPY --from=builder /opt/bitnami/rootfs /
+COPY --from=builder /opt/bitnami/prometheus/.spdx-prometheus.spdx /opt/bitnami/prometheus/.spdx-prometheus.spdx
+COPY --from=builder /opt/bitnami/prometheus/bin /opt/bitnami/prometheus/bin
+COPY --from=builder /opt/bitnami/prometheus/conf /opt/bitnami/prometheus/conf
+COPY --from=builder /opt/bitnami/prometheus/data /opt/bitnami/prometheus/data
+COPY --from=builder /opt/bitnami/prometheus/licenses /opt/bitnami/prometheus/licenses
+
 ENV APP_VERSION="3.10.0" \
     BITNAMI_APP_NAME="prometheus" \
-    IMAGE_REVISION="0" \
+    IMAGE_REVISION="1" \
     PATH="/opt/bitnami/prometheus/bin:$PATH"
 
 EXPOSE 9090
 
 WORKDIR /opt/bitnami/prometheus
+
 USER 1001
+
 ENTRYPOINT [ "/opt/bitnami/prometheus/bin/prometheus" ]
+
 CMD [ "--config.file=/opt/bitnami/prometheus/conf/prometheus.yml", "--storage.tsdb.path=/opt/bitnami/prometheus/data", "--web.console.libraries=/opt/bitnami/prometheus/conf/console_libraries", "--web.console.templates=/opt/bitnami/prometheus/conf/consoles" ]

bitnami/prometheus/README.md

@@ -1,7 +1,5 @@
 # Bitnami Secure Image for Prometheus
 
-## What is Prometheus?
-
 > Prometheus is an open source monitoring and alerting system. It enables sysadmins to monitor their infrastructures by collecting metrics from configured targets at given intervals.
 
 [Overview of Prometheus](https://prometheus.io/)
@@ -30,6 +28,10 @@ Each image comes with valuable security metadata. You can view the metadata in [
 
 If you are looking for our previous generation of images based on Debian Linux, please see the [Bitnami Legacy registry](https://hub.docker.com/u/bitnamilegacy).
 
+## How to deploy Prometheus in Kubernetes?
+
+Deploying Bitnami applications as Helm Charts is the easiest way to get started with our applications on Kubernetes. Read more about the installation in the [Bitnami Prometheus Chart GitHub repository](https://github.com/bitnami/charts/tree/master/bitnami/prometheus).
+
 ## Why use a non-root container?
 
 Non-root container images add an extra layer of security and are generally recommended for production environments. However, because they run as a non-root user, privileged tasks are typically off-limits. Learn more about non-root containers [in our docs](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-work-with-non-root-containers-index.html).
@@ -62,7 +64,7 @@ docker build -t bitnami/APP:latest .
 
 ## Persisting your database
 
-If you remove the container all your data will be lost, and the next time you run the image the database will be reinitialized. To avoid this loss of data, you should mount a volume that will add persistance even after the container is removed.
+If you remove the container all your data will be lost, and the next time you run the image the database will be reinitialized. To avoid this loss of data, you should mount a volume that will add persistence even after the container is removed.
 
 For persistence, mount a directory at the `/opt/bitnami/prometheus/data` path. If the mounted directory is empty, it will be initialized on the first run.
 
@@ -72,7 +74,7 @@ docker run --name prometheus \
     bitnami/prometheus:latest
 ```
 
-> NOTE: As this is a non-root container, the mounted files and directories must have the proper permissions for the UID `1001`.
+> **NOTE** As this is a non-root container, the mounted files and directories must have the proper permissions for the UID `1001`.
 
 ## Connecting to other containers
 
@@ -142,6 +144,10 @@ You can configure the containers [logging driver](https://docs.docker.com/engine
 
 ## Notable Changes
 
+### Starting March 4, 2026
+
+- This image revision dramatically reduces the image given it removes the existing OS distribution. Instead, it simply includes the Prometheus binary on top of a scratch base image.
+
 ### Starting January 16, 2024
 
 - The `docker-compose.yaml` file has been removed, as it was solely intended for internal testing purposes.