Disable unixodbc and related packages from Microsoft APT repo #29661
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
boring-cyborg
bot
added
area:dev-tools
area:production-image
Taragolis
force-pushed
the
disable-unixodb-from-ms-repo
branch
from
f438889 to
d31e03f
Compare
|
For comparison output from latest official Airflow Docker. By default PROD image also contains Debian's packages, however if user upgrade packages then ❯ docker run -it --rm --user root apache/airflow:2.5.1-python3.9 bash
The container is run as root user. For security, consider using a regular user account.
root@ed86d0174f98:/opt/airflow# dpkg --list | grep -E "(libodbc1|odbcinst1debian2|odbcinst|unixodbc-dev|unixodbc)"
ii libodbc1:arm64 2.3.6-0.1+b1 arm64 ODBC library for Unix
ii odbcinst 2.3.6-0.1+b1 arm64 Helper program for accessing odbc ini files
ii odbcinst1debian2:arm64 2.3.6-0.1+b1 arm64 Support library for accessing odbc ini files
ii unixodbc 2.3.6-0.1+b1 arm64 Basic ODBC tools
root@ed86d0174f98:/opt/airflow# apt update
...
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
16 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@ed86d0174f98:/opt/airflow# apt list --upgradable
Listing... Done
bind9-host/stable-security 1:9.16.37-1~deb11u1 arm64 [upgradable from: 1:9.16.33-1~deb11u1]
bind9-libs/stable-security 1:9.16.37-1~deb11u1 arm64 [upgradable from: 1:9.16.33-1~deb11u1]
curl/stable-security 7.74.0-1.3+deb11u5 arm64 [upgradable from: 7.74.0-1.3+deb11u3]
libcurl4/stable-security 7.74.0-1.3+deb11u5 arm64 [upgradable from: 7.74.0-1.3+deb11u3]
libgnutls30/stable-security 3.7.1-5+deb11u3 arm64 [upgradable from: 3.7.1-5+deb11u2]
libodbc1/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
libpq5/bullseye-pgdg 15.2-1.pgdg110+1 arm64 [upgradable from: 15.1-1.pgdg110+1]
libssl1.1/stable-security 1.1.1n-0+deb11u4 arm64 [upgradable from: 1.1.1n-0+deb11u3]
msodbcsql18/bullseye 18.2.1.1-1 arm64 [upgradable from: 18.1.2.1-1]
odbcinst1debian2/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
odbcinst/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
openssl/stable-security 1.1.1n-0+deb11u4 arm64 [upgradable from: 1.1.1n-0+deb11u3]
postgresql-client-15/bullseye-pgdg 15.2-1.pgdg110+1 arm64 [upgradable from: 15.1-1.pgdg110+1]
postgresql-client-common/bullseye-pgdg 247.pgdg110+1 all [upgradable from: 246.pgdg110+1]
postgresql-client/bullseye-pgdg 15+247.pgdg110+1 all [upgradable from: 15+246.pgdg110+1]
unixodbc/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
root@ed86d0174f98:/opt/airflow# apt-cache policy unixodbc
unixodbc:
Installed: 2.3.6-0.1+b1
Candidate: 2.3.11
Version table:
2.3.11 500
500 https://packages.microsoft.com/debian/11/prod bullseye/main arm64 Packages
*** 2.3.6-0.1+b1 500
500 http://deb.debian.org/debian bullseye/main arm64 Packages
100 /var/lib/dpkg/status |
|
At the moment when you decide not to wait anymore microsoft/linux-package-repositories#36 (comment) 🤣 🤣
|
Always. No exceptions. |
|
I don't know potentially this is PR still relevant due to |
|
Let's close until it really needed |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Disable
unixodbcand related packages from https://packages.microsoft.com/ and use packages from Debian repo instead.Update, forgot attach output from local built container