Update base image to use official python image to pin python version #2762
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This is a PR as a direct response to the following issue mitre-atlas/arsenal#2. We have found that counterfit, one of the requirements for the plugin
arsenal
is incompatible with python 3.9 and above. Theubuntu
base image as of the time of writing will install python 3.10 by default.In general this could be problematic not only for this change but potentially for future versions as the
ubuntu:latest
base image will imply it will use the latest version of ubuntu (and hence python, and other things) which can cause breaking changes. Hence we propose to use python official image as our base image such that we are able to pin the python version to 3.8.We confirmed that after applying this change and some minor typo fix in the arsenal repo (we could be opening another PR for the fix in the arsenal repo), we could successfully access arsenal in the containerized version of caldera. Also we did not face any other issues during image building and deployment.
Type of change
Please delete options that are not relevant.
How Has This Been Tested?
We have not run it with properly testing suite, please recommend the testing method for the containerized version of caldera.
Checklist: