Skip to content

Conversation

@george42-ctds
Copy link
Contributor

Link to JIRA ticket if there is one:

New Features

  • Add python3.10 nginx image

Breaking Changes

Bug Fixes

Improvements

Dependency updates

Deployment changes

@@ -0,0 +1,65 @@
ARG AZLINUX_BASE_VERSION=latest
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unless security has said otherwise, we need to follow the same level of hardening and setup the 3.13 build has. https://github.com/uc-cdis/base-images/tree/master/python3.13#python-313--image-standard

Which includes trying to replicate as much of the 3.13 work as possible.

Can you try ARG AZLINUX_BASE_VERSION=hardened or did you already?

or perhaps you should start with the hardened 3.13 image (maybe https://github.com/uc-cdis/base-images/blob/master/python3.13/python_nginx/Dockerfile) and work on installing Python 3.10 on that instead of starting from scratch.

Since you're already downloading and installing 3.10 manually, it might be better for us to build on the 3.13 nginx image above and then install 3.10 and try to alias python or something to the 3.10 version

I'll defer to security, we should get them to review this

@@ -0,0 +1,76 @@
user gen3;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this a copy of the 3.13 version? and is it possible to include it directly the build instead of having another file?
https://github.com/uc-cdis/base-images/blob/master/python3.13/python_nginx/nginx.conf

I think b/c of docker context relative pathing above this dir isn't simple... maybe just add a large comment about this being a copy of the 3.13 version.

This 3.10 stuff is all temporary, right?

@george42-ctds george42-ctds marked this pull request as draft January 6, 2026 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants