@@ -13,12 +13,17 @@ RUN apt-get update \
13
13
vim \
14
14
unzip \
15
15
git \
16
- && curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add --no-tty - \
17
- && curl https://packages.microsoft.com/config/debian/12/prod.list > /etc/apt/sources.list.d/mssql-release.list \
16
+ && curl https://packages.microsoft.com/keys/microsoft.asc | tee /etc/apt/trusted.gpg.d/microsoft.asc \
17
+ && curl https://packages.microsoft.com/config/debian/12/prod.list | tee /etc/apt/sources.list.d/mssql-release.list \
18
+ && echo "deb [arch=amd64,arm64,armhf] https://packages.microsoft.com/debian/12/prod bookworm main" > /etc/apt/sources.list.d/mssql-release.list \
18
19
&& apt-get update -yqq \
19
- && ACCEPT_EULA=Y apt-get install -yqq msodbcsql17 mssql-tools \
20
- && sed -i 's,^\( MinProtocol[ ]*=\) .*,\1 ' TLSv1.0',g' /etc/ssl/openssl.cnf \
21
- && sed -i 's,^\( CipherString[ ]*=\) .*,\1 ' DEFAULT@SECLEVEL=1',g' /etc/ssl/openssl.cnf \
20
+ && ACCEPT_EULA=Y apt-get install -yqq msodbcsql17 \
21
+ && sed -i '/\[ openssl_init\] /a ssl_conf = ssl_configuration' /etc/ssl/openssl.cnf \
22
+ && echo "[ssl_configuration]" >> /etc/ssl/openssl.cnf \
23
+ && echo "system_default = tls_system_default" >> /etc/ssl/openssl.cnf \
24
+ && echo "[tls_system_default]" >> /etc/ssl/openssl.cnf \
25
+ && echo "MinProtocol = TLSv1" >> /etc/ssl/openssl.cnf \
26
+ && echo "CipherString = DEFAULT@SECLEVEL=0" >> /etc/ssl/openssl.cnf \
22
27
&& curl -O http://acraiz.icpbrasil.gov.br/credenciadas/CertificadosAC-ICP-Brasil/ACcompactado.zip \
23
28
&& unzip ACcompactado.zip -d /usr/local/share/ca-certificates/ \
24
29
&& update-ca-certificates \
71
76
72
77
RUN while [[ "$(curl -s -o /tmp/thawte.pem -w ''%{http_code}'' https://ssltools.digicert.com/chainTester/webservice/validatecerts/certificate?certKey=issuer.intermediate.cert.98&fileName=Thawte%20RSA%20CA%202018&fileExtension=txt)" != "200" ]]; do sleep 1; done
73
78
RUN cat /tmp/thawte.pem >> /home/airflow/.local/lib/python3.10/site-packages/certifi/cacert.pem
74
- RUN echo 'export PATH="$PATH:/opt/mssql-tools/bin"' >> ~/.bashrc && \
75
- source ~/.bashrc
76
79
RUN rm ACcompactado.zip requirements-cdata-dags.txt requirements-uninstall.txt
80
+
0 commit comments