Currently, ST only provides a base image for CICD so it means we do not have a hardened base image for people to use as a base image for their own OCI images, this makes it harder to patch security vulnerabilities, causes divergences in the base OS layer and makes it hard and expensive for operations to manage many images in production instead of a few. Also see ROAM-518

Provide a base image that's deprived of application level dependencies for people to use as a base image when building their own products or other variant base images (like ska-tango-images, js, gpu ones) image name needs to be agreed with Piers. Image should base on ubuntu 22.04 with the minimum set of binaries needed for building application code on top of it python 3.10.X poetry 1.X no kubectl, helm or other supporting binaries WOMBAT Dependency: Move ska-tango-util and ska-tango-base helm charts out of ska-tango-images repository and identify which is needed in what image Remove ST from CODEOWNERS in ska-tango-images repository as wombat will maintain it going forward wait-for-it.sh (and https://gitlab.com/ska-telescope/ska-tango-images/-/blob/master/images/ska-tango-images-tango-dependencies/retry.sh) and other scripts can be moved to the helm chart itself instead of the dsconfig image. (TBD: needs more discussion to understand what the impact would be) https://gitlab.com/ska-telescope/ska-tango-images/-/blob/master/images/ska-tango-images-pytango-builder/Dockerfile#L53 << do we still need bcc here? Agree on the dependant images that the Helm Charts need (tango-db etc.) Agree on a scheduled/automated patching routine and rollout for the base image Implement it with ST repositories Marvin repositories ska-cicd-k8s-tools CI/CD image needs to base on this instead of default ubuntu services api repository makefile submodule test Dockerfiles ska-tango-examples ska-tango-images The automated patching routine should be end to end: Schedule (manually or automatically) when it should be patched Apply the updates, security patches Rollout to ST repositories automatically if possible (TBD) Provide documentation on: Explanation:  how it's selected, what's important o build up SKA security posture How to: How people can add this and keep it updated