Breaking Change: Removal of curl from .NET 5.0 runtime Docker images #2379
Description
Removal of curl from runtime Docker images
The curl package has been removed from the runtime and aspnet Linux images with the release of .NET 5.0. This is considered a breaking change which may impact your build or application when upgrading to .NET 5.0.
Details
Our primary goal in producing Docker images for .NET is to reduce the occurrences of security vulnerabilities. We determined that the use of curl in these images wasn't a common enough scenario to justify the increased security surface area it added. If you rely on curl as part of docker build, you are encouraged to install it yourself in your Dockerfile, or rely on multi-stage build, by using a buildpack-deps stage, as we do for .NET runtime images. If you only require curl when consuming the sdk image, you won't be affected since curl is included in that image.