From 0c15cc5b1e7e954fb9b73fc603fffa3b3df21392 Mon Sep 17 00:00:00 2001 From: Bradley Laney Date: Fri, 6 Jun 2025 15:44:26 -0400 Subject: [PATCH] dockerfile: add libsasl2-modules-gssapi-mit and krb5-user libsasl2-modules-gssapi-mit is needed by librdkafka to use the following configurations for authentication with Kafka: ``` rdkafka.security.protocol SASL_SSL rdkafka.sasl.mechanism GSSAPI ``` krb5-user is needed by librdkafka to invoke `kinit` to obtains ticket-granting tickets These changes _cannot_ be added to the production image target because librdkafka uses the `system` call to invoke `kinit`, the distroless base does not have a shell, and we are not going to add it. Signed-off-by: Ryan Hall Signed-off-by: Bradley Laney --- dockerfiles/Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/dockerfiles/Dockerfile b/dockerfiles/Dockerfile index a29798bfabe..493c5504f09 100644 --- a/dockerfiles/Dockerfile +++ b/dockerfiles/Dockerfile @@ -132,6 +132,7 @@ RUN echo "deb http://deb.debian.org/debian bookworm-backports main" >> /etc/apt/ libpsl5 \ libbrotli1 \ libsasl2-2 \ + libsasl2-modules-gssapi-mit \ pkg-config \ libpq5 \ libsystemd0/bookworm-backports \ @@ -239,6 +240,8 @@ RUN echo "deb http://deb.debian.org/debian bookworm-backports main" >> /etc/apt/ libpsl5 \ libbrotli1 \ libsasl2-2 \ + libsasl2-modules-gssapi-mit \ + krb5-user \ pkg-config \ libpq5 \ libsystemd0/bookworm-backports \