[HADOOP-17692] [thirdparty] Fix the docker image

• Type: Sub-task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: thirdparty-1.1.0
• Fix Version/s: thirdparty-1.1.0
• Labels: pull-request-available
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 12/May/21 05:01
• Updated: 13/May/21 05:14
• Resolved: 13/May/21 05:14

Description

The hadoop-thirdparty release script does not work out of box.

(1) Hard code a python dependency version to avoid image build error.
(2) Remove npm which is not used for building hadoop-thirdparty to avoid image build error.
(2) Use GPG 2.2 (LTS) instead of 1.x for signing. GPG 1.x is quite old and is not compatible with GPG 2.x (https://superuser.com/questions/1112673/gpg2-no-secret-key). The build script runs a gpg agent inside docker that shares the gpg keys with the host machine. Most host machines today ships with GPG 2. Ubuntu 18.04 installs gpg 2.2 by default.

(gpg2.1, which is supported by Ubuntu 16.04, is not compatible with gpg 2.2: https://github.com/sobolevn/git-secret/issues/136)

Issue Links

• links to: GitHub Pull Request #14