hello-stephen opened a new pull request, #68440:
URL: https://github.com/apache/doris/pull/68440
### What problem does this PR solve?
Issue Number: None
Related PR: None
Problem Summary: External regression rebuilds the Hive 3.1.3 Kerberos
fixture on every run. Its mutable Debian Bullseye repositories can return HTTP
404 for required krb5 packages, which stops deployment before tests start.
This change pins the base image and signed Debian snapshots used to produce
the fixture, publishes that linux/amd64 image to `doristhirdpartydocker/hive`,
and changes branch-4.1 Kerberos startup to pull the immutable image digest
instead of rebuilding it.
Published candidate provenance:
- Image source commit: `63e413b47aba101fe67a862dc13f9bc75d88652c`
- Candidate tag: `3.1.3-kerberos-branch-4.1-63e413b4-candidate-20260923`
- Registry digest:
`sha256:b094fbc1a61c65116fbe2f0bca562687a10af418e7a0b2865f8d7b70cd8ad03e`
- Platform: `linux/amd64`
- Installed krb5 packages: `1.18.3-6+deb11u8`
### Release note
None
### Check List (For Author)
- Test: Manual test
- Built and pushed the image on TeamCity worker `172.20.48.9`.
- Deleted its local tag and image, pulled it back from Docker Hub by
digest, and verified the digest, platform, OCI revision, package versions, and
entrypoint/health script hashes.
- Rendered `kerberos.yaml.tpl` and verified both services resolve to the
pinned digest.
- Full Kerberos container startup and the real External Kerberos case
are pending the PR-bound TeamCity run.
- Behavior changed: Yes. Kerberos fixture startup pulls an immutable
prebuilt image instead of running APT during every pipeline.
- Does this need documentation: No
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
