diff --git a/api/Dockerfile b/api/Dockerfile index 795dd73e5..7e6868cee 100644 --- a/api/Dockerfile +++ b/api/Dockerfile @@ -21,9 +21,10 @@ RUN \ postgresql-dev \ python3-dev \ py3-psycopg2=2.9.5-r0 \ - py3-cryptography \ - py3-lxml \ - py3-pillow \ + py3-cryptography=38.0.3-r0 \ + py3-lxml=4.9.1-r0 \ + py3-pillow=9.3.0-r0 \ + py3-watchfiles=0.18.1-r0 \ libldap \ libffi-dev \ make \ @@ -53,14 +54,14 @@ RUN \ # is why we need to use the packages shipped by Alpine Linux. # Since poetry does not allow in-place dependency pinning, we need # to install the deps using pip. - grep -Ev 'cryptography|uvicorn|watchgod|watchfiles|lxml|pillow|psycopg2' /requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 uvicorn==0.17.6 watchgod==0.8.2 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \ + grep -Ev 'cryptography|watchfiles|lxml|pillow|psycopg2' /requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 watchfiles==0.18.1 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \ rm -rf "$PIP_DOWNLOAD_CACHE" ARG install_dev_deps=0 RUN \ if [ "$install_dev_deps" = "1" ] ; then \ echo "Installing dev dependencies" && \ - grep -Ev 'cryptography|uvicorn|watchgod|watchfiles|lxml|pillow|psycopg2' /dev-requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 uvicorn==0.17.6 watchgod==0.8.2 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \ + grep -Ev 'cryptography|watchfiles|lxml|pillow|psycopg2' /dev-requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 watchfiles==0.18.1 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \ rm -rf "$PIP_DOWNLOAD_CACHE" \ ; else \ echo "Skipping dev deps installation" \ @@ -84,9 +85,10 @@ RUN apk add --no-cache \ libxml2 \ libxslt \ py3-psycopg2=2.9.5-r0 \ - py3-cryptography \ - py3-lxml \ - py3-pillow \ + py3-cryptography=38.0.3-r0 \ + py3-lxml=4.9.1-r0 \ + py3-pillow=9.3.0-r0 \ + py3-watchfiles=0.18.1-r0 \ libldap COPY . /app