Downgrade to python 3.11 as no wheel available google-crc32 - see goo…

…gleapis/python-crc32c#178
alexdmoss · Jul 21, 2024 · a8bdbb4 · a8bdbb4
1 parent f45ff4f
commit a8bdbb4
Show file tree

Hide file tree

Showing 5 changed files with 11 additions and 11 deletions.
diff --git a/.python-version b/.python-version
@@ -1 +1 @@
-3.12
+3.11
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM al3xos/python-builder:3.12-debian12 AS builder
+FROM al3xos/python-builder:3.11-debian12 AS builder
 
 COPY photo-album/poetry.lock .
 COPY photo-album/pyproject.toml .
@@ -11,7 +11,7 @@ RUN poetry config virtualenvs.create false && \
 
 # ---------------------------------------------------------------------
 
-FROM al3xos/python-distroless:3.12-debian12-debug
+FROM al3xos/python-distroless:3.11-debian12-debug
 
 COPY photo-album/ /app/
 COPY --chown=monty:monty .keep /photos/.keep

diff --git a/photo-album/poetry.lock b/photo-album/poetry.lock
diff --git a/photo-album/pyproject.toml b/photo-album/pyproject.toml
@@ -7,7 +7,7 @@ license = "GNU GPLv3"
 readme = "README.md"
 
 [tool.poetry.dependencies]
-python = "^3.12"
+python = "^3.11"
 fastapi = "^0.111.0"
 pydantic-settings = "^2.3.4"
 jinja2 = "^3.1.4"

diff --git a/photo-album/slideshow/secret.py b/photo-album/slideshow/secret.py
@@ -1,6 +1,5 @@
 import json
 import logging
-from os import getenv
 
 from google.cloud import secretmanager
 import google_crc32c
@@ -23,6 +22,7 @@ def read_auth_api_secret():
 
     response = client.access_secret_version(request={"name": name})
 
+    # check secret not tampered with
     crc32c = google_crc32c.Checksum()
     crc32c.update(response.payload.data)
     if response.payload.data_crc32c != int(crc32c.hexdigest(), 16):