Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update base images #672

Closed
iromli opened this issue Jan 23, 2022 · 0 comments · Fixed by #673
Closed

Update base images #672

iromli opened this issue Jan 23, 2022 · 0 comments · Fixed by #673

Comments

@iromli
Copy link
Contributor

iromli commented Jan 23, 2022

Current images are based on vanilla Alpine v3.13 which unfortunately has several problems:

  • vanilla Alpine uses musl (instead of glibc) as libc implementation; unfortunately the Java binding for gRPC requires glibc
  • some security patches are available in newer Alpine versions
  • py3-grpcio package is too old (currently v1.30.x) but the Google API lib requires v1.33.2 and above

Notes:

  • Aurora support requires changes in jans-sql.properties (needs enabledTLSProtocols=TLSv1.2 option in connection URI) as per Java 11.0.11 and above
  • The bellsoft/liberica-openjre-alpine image has glibc support instead of musl
  • any additional notes will be added later
iromli added a commit that referenced this issue Jan 23, 2022
Overview:
- all Java-centric images are based on bellsoft/liberica-openjre-alpine:11 image
- add enabledTLSProtocols=TLSv1.2 option to SQL connection URI
- install py3-grpcio 1.41 from Alpine v3.15 repo
@iromli iromli linked a pull request Jan 23, 2022 that will close this issue
@moabu moabu added this to the 1.0.0 milestone Jan 24, 2022
moabu pushed a commit that referenced this issue Jan 24, 2022
Overview:
- all Java-centric images are based on bellsoft/liberica-openjre-alpine:11 image
- add enabledTLSProtocols=TLSv1.2 option to SQL connection URI
- install py3-grpcio 1.41 from Alpine v3.15 repo
This was referenced Feb 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment