This is an automated email from the ASF dual-hosted git repository.
hello-stephen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new 01f1e4f7b29 [fix](regression) Reuse pinned Kerberos dependencies
without host build networking (#68953)
01f1e4f7b29 is described below
commit 01f1e4f7b290ff4b90b9f05637467c9b009056cd
Author: Dongyang Li <[email protected]>
AuthorDate: Tue Oct 13 20:13:52 2026 +0800
[fix](regression) Reuse pinned Kerberos dependencies without host build
networking (#68953)
Related PR: #68440
Kerberos regression is blocked before cases execute: the fixture
installs packages from mutable Debian Bullseye repositories that can
return 404, and Compose Bake rejects its host build network without an
explicit entitlement.
Use the existing Hive 3.1.3/Kerberos image by immutable digest as a
dependency layer, then COPY this branch's entrypoint and health scripts
as before. Remove only the Compose build network setting; the remaining
Dockerfile needs no network, while runtime host networking, generated
keytabs, fixture data, and readiness checks stay unchanged. This is a
two-file fix that preserves each branch's service scripts, including
newer fixture initialization.
Base image:
`doristhirdpartydocker/hive@sha256:b094fbc1a61c65116fbe2f0bca562687a10af418e7a0b2865f8d7b70cd8ad03e`,
published by #68440's pinned build recipe from source
`63e413b47aba101fe67a862dc13f9bc75d88652c`; linux/amd64, Hive 3.1.3,
krb5 packages `1.18.3-6+deb11u8`.
---
docker/thirdparties/docker-compose/kerberos/Dockerfile | 11 +++--------
docker/thirdparties/docker-compose/kerberos/kerberos.yaml.tpl | 1 -
2 files changed, 3 insertions(+), 9 deletions(-)
diff --git a/docker/thirdparties/docker-compose/kerberos/Dockerfile
b/docker/thirdparties/docker-compose/kerberos/Dockerfile
index 88723e1313b..fe52abf2fd6 100644
--- a/docker/thirdparties/docker-compose/kerberos/Dockerfile
+++ b/docker/thirdparties/docker-compose/kerberos/Dockerfile
@@ -15,17 +15,12 @@
# specific language governing permissions and limitations
# under the License.
-FROM apache/hive:3.1.3
+# Hive 3.1.3 with krb5 1.18.3-6+deb11u8, built from the pinned recipe in
#68440.
+# Keep this branch's entrypoint and health checks in the small layer below.
+FROM
doristhirdpartydocker/hive@sha256:b094fbc1a61c65116fbe2f0bca562687a10af418e7a0b2865f8d7b70cd8ad03e
USER root
-RUN apt-get -o Acquire::Retries=3 -o APT::Update::Error-Mode=any update \
- && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends
-y \
- krb5-admin-server \
- krb5-kdc \
- krb5-user \
- && rm -rf /var/lib/apt/lists/*
-
COPY entrypoint-hive-master.sh /opt/doris/entrypoint.sh
COPY health-checks/health.sh /opt/doris/health.sh
diff --git a/docker/thirdparties/docker-compose/kerberos/kerberos.yaml.tpl
b/docker/thirdparties/docker-compose/kerberos/kerberos.yaml.tpl
index 8e903ed6d7f..cf1dc94867c 100644
--- a/docker/thirdparties/docker-compose/kerberos/kerberos.yaml.tpl
+++ b/docker/thirdparties/docker-compose/kerberos/kerberos.yaml.tpl
@@ -20,7 +20,6 @@ x-kerberos-image: &kerberos-image
build:
context: .
dockerfile: Dockerfile
- network: host
x-kerberos-service: &kerberos-service
<<: *kerberos-image
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
