Skip to content

Commit 046c8e8

Browse files
committed
fix mssql odbc
1 parent 9a2b4cd commit 046c8e8

File tree

1 file changed

+11
-7
lines changed

1 file changed

+11
-7
lines changed

Dockerfile

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,17 @@ RUN apt-get update \
1313
vim \
1414
unzip \
1515
git \
16-
&& curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add --no-tty - \
17-
&& curl https://packages.microsoft.com/config/debian/12/prod.list > /etc/apt/sources.list.d/mssql-release.list \
16+
&& curl https://packages.microsoft.com/keys/microsoft.asc | tee /etc/apt/trusted.gpg.d/microsoft.asc \
17+
&& curl https://packages.microsoft.com/config/debian/12/prod.list | tee /etc/apt/sources.list.d/mssql-release.list \
18+
&& echo "deb [arch=amd64,arm64,armhf] https://packages.microsoft.com/debian/12/prod bookworm main" > /etc/apt/sources.list.d/mssql-release.list \
1819
&& apt-get update -yqq \
19-
&& ACCEPT_EULA=Y apt-get install -yqq msodbcsql17 mssql-tools \
20-
&& sed -i 's,^\(MinProtocol[ ]*=\).*,\1'TLSv1.0',g' /etc/ssl/openssl.cnf \
21-
&& sed -i 's,^\(CipherString[ ]*=\).*,\1'DEFAULT@SECLEVEL=1',g' /etc/ssl/openssl.cnf \
20+
&& ACCEPT_EULA=Y apt-get install -yqq msodbcsql17 \
21+
&& sed -i '/\[openssl_init\]/a ssl_conf = ssl_configuration' /etc/ssl/openssl.cnf \
22+
&& echo "[ssl_configuration]" >> /etc/ssl/openssl.cnf \
23+
&& echo "system_default = tls_system_default" >> /etc/ssl/openssl.cnf \
24+
&& echo "[tls_system_default]" >> /etc/ssl/openssl.cnf \
25+
&& echo "MinProtocol = TLSv1" >> /etc/ssl/openssl.cnf \
26+
&& echo "CipherString = DEFAULT@SECLEVEL=0" >> /etc/ssl/openssl.cnf \
2227
&& curl -O http://acraiz.icpbrasil.gov.br/credenciadas/CertificadosAC-ICP-Brasil/ACcompactado.zip \
2328
&& unzip ACcompactado.zip -d /usr/local/share/ca-certificates/ \
2429
&& update-ca-certificates \
@@ -71,6 +76,5 @@ RUN \
7176

7277
RUN while [[ "$(curl -s -o /tmp/thawte.pem -w ''%{http_code}'' https://ssltools.digicert.com/chainTester/webservice/validatecerts/certificate?certKey=issuer.intermediate.cert.98&fileName=Thawte%20RSA%20CA%202018&fileExtension=txt)" != "200" ]]; do sleep 1; done
7378
RUN cat /tmp/thawte.pem >> /home/airflow/.local/lib/python3.10/site-packages/certifi/cacert.pem
74-
RUN echo 'export PATH="$PATH:/opt/mssql-tools/bin"' >> ~/.bashrc && \
75-
source ~/.bashrc
7679
RUN rm ACcompactado.zip requirements-cdata-dags.txt requirements-uninstall.txt
80+

0 commit comments

Comments
 (0)