[info=80829e878c83279b6b324037c6a12bfc]

OBS-URL: https://build.opensuse.org/package/show/devel:BCI:Tumbleweed/mariadb-image?expand=0&rev=9

Dockerfile

@@ -38,7 +38,7 @@ LABEL org.opensuse.release-stage="released"
 
 # endlabelprefix
 
-RUN set -euo pipefail; zypper -n in --no-recommends mariadb mariadb-tools gawk timezone util-linux pwgen; zypper -n clean; rm -rf /var/log/*
+RUN set -euo pipefail; zypper -n in --no-recommends mariadb mariadb-tools gawk timezone util-linux; zypper -n clean; rm -rf /var/log/*
 ENTRYPOINT ["docker-entrypoint.sh"]
 CMD ["mariadbd"]
 EXPOSE 3306
@@ -50,6 +50,7 @@ RUN set -euo pipefail; chmod 755 /usr/local/bin/docker-entrypoint.sh
 RUN set -euo pipefail; ln -s usr/local/bin/docker-entrypoint.sh / # backwards compat
 
 RUN set -euo pipefail; sed -i -e 's,exec gosu mysql ,exec setpriv --reuid=mysql --regid=mysql --clear-groups -- /bin/bash ,g' /usr/local/bin/docker-entrypoint.sh
+RUN set -euo pipefail; sed -i -e 's,$(pwgen .*),$(openssl rand -base64 36),' /usr/local/bin/docker-entrypoint.sh
 
 # Ensure all logs goes to stdout
 RUN set -euo pipefail; sed -i 's/^log/#log/g' /etc/my.cnf

mariadb-image.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sat Jan  6 10:44:23 UTC 2024 - Dirk Mueller <dmueller@suse.com>
+
+- use openssl to generate passwords securely
+
 -------------------------------------------------------------------
 Tue Jan  2 08:26:58 UTC 2024 - Dirk Mueller <dmueller@suse.com>