[GitHub] [airflow] Taragolis commented on pull request #29661: Disable unixodbc and related packages from Microsoft APT repo

["Taragolis (via GitHub)" <gi...@apache.org>]

Taragolis commented on PR #29661:
URL: https://github.com/apache/airflow/pull/29661#issuecomment-1439171423

   For comparison output from latest official Airflow Docker. By default PROD image also contains Debian's packages, however if user upgrade packages then `unixodbc` related packages will upgrade to packages from Microsoft repo
   
   ```console
   ❯ docker run -it --rm --user root apache/airflow:2.5.1-python3.9 bash
   The container is run as root user. For security, consider using a regular user account.
   
   root@ed86d0174f98:/opt/airflow# dpkg --list | grep -E "(libodbc1|odbcinst1debian2|odbcinst|unixodbc-dev|unixodbc)"
   ii  libodbc1:arm64             2.3.6-0.1+b1                   arm64        ODBC library for Unix
   ii  odbcinst                   2.3.6-0.1+b1                   arm64        Helper program for accessing odbc ini files
   ii  odbcinst1debian2:arm64     2.3.6-0.1+b1                   arm64        Support library for accessing odbc ini files
   ii  unixodbc                   2.3.6-0.1+b1                   arm64        Basic ODBC tools
   
   root@ed86d0174f98:/opt/airflow# apt update
   ...                          
   Reading package lists... Done
   Building dependency tree... Done
   Reading state information... Done
   16 packages can be upgraded. Run 'apt list --upgradable' to see them.
   
   root@ed86d0174f98:/opt/airflow# apt list --upgradable
   Listing... Done
   bind9-host/stable-security 1:9.16.37-1~deb11u1 arm64 [upgradable from: 1:9.16.33-1~deb11u1]
   bind9-libs/stable-security 1:9.16.37-1~deb11u1 arm64 [upgradable from: 1:9.16.33-1~deb11u1]
   curl/stable-security 7.74.0-1.3+deb11u5 arm64 [upgradable from: 7.74.0-1.3+deb11u3]
   libcurl4/stable-security 7.74.0-1.3+deb11u5 arm64 [upgradable from: 7.74.0-1.3+deb11u3]
   libgnutls30/stable-security 3.7.1-5+deb11u3 arm64 [upgradable from: 3.7.1-5+deb11u2]
   libodbc1/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
   libpq5/bullseye-pgdg 15.2-1.pgdg110+1 arm64 [upgradable from: 15.1-1.pgdg110+1]
   libssl1.1/stable-security 1.1.1n-0+deb11u4 arm64 [upgradable from: 1.1.1n-0+deb11u3]
   msodbcsql18/bullseye 18.2.1.1-1 arm64 [upgradable from: 18.1.2.1-1]
   odbcinst1debian2/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
   odbcinst/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
   openssl/stable-security 1.1.1n-0+deb11u4 arm64 [upgradable from: 1.1.1n-0+deb11u3]
   postgresql-client-15/bullseye-pgdg 15.2-1.pgdg110+1 arm64 [upgradable from: 15.1-1.pgdg110+1]
   postgresql-client-common/bullseye-pgdg 247.pgdg110+1 all [upgradable from: 246.pgdg110+1]
   postgresql-client/bullseye-pgdg 15+247.pgdg110+1 all [upgradable from: 15+246.pgdg110+1]
   unixodbc/bullseye 2.3.11 arm64 [upgradable from: 2.3.6-0.1+b1]
   
   root@ed86d0174f98:/opt/airflow# apt-cache policy unixodbc
   unixodbc:
     Installed: 2.3.6-0.1+b1
     Candidate: 2.3.11
     Version table:
        2.3.11 500
           500 https://packages.microsoft.com/debian/11/prod bullseye/main arm64 Packages
    *** 2.3.6-0.1+b1 500
           500 http://deb.debian.org/debian bullseye/main arm64 Packages
           100 /var/lib/dpkg/status
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org