Install packages without docs to reduce image size

The UBI base images do not set tsflags in /etc/dnf/dnf.conf, so every dnf
install and dnf update we run installs documentation and man pages into
the layers we ship. They grow the image for no runtime benefit and get
picked up by CI scanners; #772 hit this when the perl docs pulled in by
git were flagged for containing sample secrets.

Set tsflags=nodocs once per RHEL image, before the first dnf transaction,
so every later call inherits it. That covers the installs in install.sh
and the CVE_UPDATES blocks, and also the ones nvidia-driver and
ocp_dtk_entrypoint run when the container starts, which passing --nodocs
per command would have missed.

The bases differ in what they provide, so the value is written through
dnf's own config writer rather than by editing the file directly:

  rockylinux 9.8-ubi and 10.2-ubi already ship tsflags=nodocs, so nothing
  is done; ubi8, ubi9, ubi10 and the CUDA UBI bases have config-manager
  preinstalled; rockylinux 8.10-ubi has neither and installs it first.

Installing config-manager costs about 4 MiB and only happens on
rockylinux 8, which is close to end of life. Everywhere else it is free.

Signed-off-by: Abrar Shivani <ashivani@nvidia.com>

Author: abrarshivani

rhel10/Dockerfile

@@ -35,6 +35,12 @@ ENV TARGETARCH=$TARGETARCH
 
 SHELL ["/bin/bash", "-c"]
 
+RUN if ! grep -qE '^tsflags=.*nodocs' /etc/dnf/dnf.conf; then \
+        dnf config-manager --help >/dev/null 2>&1 || \
+            dnf install -y --nodocs 'dnf-command(config-manager)'; \
+        dnf config-manager --save --setopt=tsflags=nodocs; \
+    fi
+
 RUN dnf update -y && dnf clean all
 
 #ARG BASE_URL=http://us.download.nvidia.com/XFree86/Linux-x86_64

rhel8/Dockerfile

@@ -34,6 +34,12 @@ ENV TARGETARCH=$TARGETARCH
 
 SHELL ["/bin/bash", "-c"]
 
+RUN if ! grep -qE '^tsflags=.*nodocs' /etc/dnf/dnf.conf; then \
+        dnf config-manager --help >/dev/null 2>&1 || \
+            dnf install -y --nodocs 'dnf-command(config-manager)'; \
+        dnf config-manager --save --setopt=tsflags=nodocs; \
+    fi
+
 RUN dnf update -y && dnf clean all
 
 #ARG BASE_URL=http://us.download.nvidia.com/XFree86/Linux-x86_64

rhel9/Dockerfile

@@ -34,6 +34,12 @@ ENV TARGETARCH=$TARGETARCH
 
 SHELL ["/bin/bash", "-c"]
 
+RUN if ! grep -qE '^tsflags=.*nodocs' /etc/dnf/dnf.conf; then \
+        dnf config-manager --help >/dev/null 2>&1 || \
+            dnf install -y --nodocs 'dnf-command(config-manager)'; \
+        dnf config-manager --save --setopt=tsflags=nodocs; \
+    fi
+
 RUN dnf update -y && dnf clean all
 
 #ARG BASE_URL=http://us.download.nvidia.com/XFree86/Linux-x86_64

vgpu-manager/rhel8/Dockerfile

@@ -23,6 +23,12 @@ RUN chmod +x NVIDIA-Linux-${DRIVER_ARCH}-${DRIVER_VERSION}-vgpu-kvm.run
 COPY nvidia-driver /usr/local/bin
 COPY ocp_dtk_entrypoint /usr/local/bin
 
+RUN if ! grep -qE '^tsflags=.*nodocs' /etc/dnf/dnf.conf; then \
+        dnf config-manager --help >/dev/null 2>&1 || \
+            dnf install -y --nodocs 'dnf-command(config-manager)'; \
+        dnf config-manager --save --setopt=tsflags=nodocs; \
+    fi
+
 RUN dnf install -y pciutils && \
     dnf clean all && \
     rm -rf /var/cache/dnf/*

vgpu-manager/rhel9/Dockerfile

@@ -36,6 +36,12 @@ RUN chmod +x NVIDIA-Linux-${DRIVER_ARCH}-${DRIVER_VERSION}-vgpu-kvm.run
 COPY nvidia-driver /usr/local/bin
 COPY ocp_dtk_entrypoint /usr/local/bin
 
+RUN if ! grep -qE '^tsflags=.*nodocs' /etc/dnf/dnf.conf; then \
+        dnf config-manager --help >/dev/null 2>&1 || \
+            dnf install -y --nodocs 'dnf-command(config-manager)'; \
+        dnf config-manager --save --setopt=tsflags=nodocs; \
+    fi
+
 RUN dnf install -y pciutils && \
     dnf clean all && \
     rm -rf /var/cache/dnf/*