build(docker): pin pip requirements in requirements.txt for dockerfil…

…es (#3023)

.github/dependabot.yml

@@ -58,6 +58,13 @@ updates:
       interval: weekly
     commit-message:
       prefix: "deps(docker):"
+  # Update pinned pip packages via requiements.txt
+  - package-ecosystem: "pip"
+    directory: "/docker/build"
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: "deps(docker,pip):"
   - package-ecosystem: "docker"
     directory: "/docker/build"
     schedule:
@@ -148,12 +155,26 @@ updates:
       interval: weekly
     commit-message:
       prefix: "deps(docker):"
+  # Update pinned pip packages via requiements.txt
+  - package-ecosystem: "pip"
+    directory: "/docker/postgres-kanister-tools"
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: "deps(docker,pip):"
   - package-ecosystem: "docker"
     directory: "/docker/postgres-kanister-tools"
     schedule:
       interval: weekly
     commit-message:
       prefix: "deps(docker):"
+  # Update pinned pip packages via requiements.txt
+  - package-ecosystem: "pip"
+    directory: "/docker/postgresql"
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: "deps(docker,pip):"
   - package-ecosystem: "docker"
     directory: "/docker/postgresql"
     schedule:

docker/build/Dockerfile

@@ -31,7 +31,8 @@ RUN GOBIN=/usr/local/bin go install github.com/ahmetb/gen-crd-api-reference-docs
 
 RUN apt-get update && apt-get install -y pip
 
-RUN pip install reno nb2plots
+COPY docker/build/requirements.txt requirements.txt
+RUN pip install -r requirements.txt
 
 RUN apt-get install -y vim
 

docker/build/requirements.txt

@@ -0,0 +1,2 @@
+reno==4.1.0
+nb2plots==0.7.2

docker/postgres-kanister-tools/Dockerfile

@@ -10,9 +10,10 @@ ENV DEBIAN_FRONTEND noninteractive
 
 USER root
 
+COPY docker/postgres-kanister-tools/requirements.txt requirements.txt
+
 RUN apt-get update && apt-get -y install curl python3 groff less jq python3-pip && \
-    pip3 install --upgrade pip setuptools wheel && \
-    pip3 install --upgrade awscli && \
+    pip3 install -r requirements.txt && \
     apt-get remove -y python3-setuptools python3-wheel && \
     apt-get clean
 

docker/postgres-kanister-tools/requirements.txt

@@ -0,0 +1,4 @@
+awscli==1.33.38
+pip==24.2
+setuptools==72.1.0
+wheel==0.44.0

docker/postgresql/Dockerfile

@@ -6,12 +6,11 @@ USER root
 RUN useradd -r --gid=0 --uid=1001 postgres
 
 # Install required components for backup
+COPY docker/postgresql/requirements.txt requirements.txt
+
 RUN set -x \
 	&& apt-get update \
 	&& apt-get install -y curl groff lzop pv postgresql-client python3-pip daemontools \
-	&& pip3 install --break-system-packages --upgrade pip \
-	&& hash -r pip3 \
-	&& pip3 install --break-system-packages wal-e[aws] \
-	&& pip3 install --break-system-packages awscli
+	&& pip3 install --break-system-packages -r requirements.txt
 
 USER postgres

docker/postgresql/requirements.txt

@@ -0,0 +1,5 @@
+awscli==1.33.38
+wal-e==1.1.1
+pip==24.2
+setuptools==72.1.0
+wheel==0.44.0