Anaconda & Minconda: Fix conda update bug due to pyOpenssl (devcontainers#489)

* Anaconda & Minconda: Fix conda update bug due to pyOpenssl

* update test

* fix test

* add tests

* add --yes

* fix user permission

* add check

* update test - works locally

Author: samruddhikhandale

src/anaconda/.devcontainer/Dockerfile

@@ -73,7 +73,9 @@ RUN python3 -m pip install \
     # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40898
     wheel \
     # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
-    nbconvert
+    nbconvert \
+    # https://github.com/devcontainers/images/issues/486
+    pyOpenssl
 
 # Copy environment.yml (if found) to a temp location so we can update the environment. Also
 # copy "noop.txt" so the COPY instruction does not fail if no environment.yml exists.

src/anaconda/manifest.json

@@ -34,7 +34,8 @@
 			"future",
 			"wheel",
 			"nbconvert",
-			"py"
+			"py",
+			"pyOpenssl"
 		],
 		"other": {
 			"git": {},

src/anaconda/test-project/test.sh

@@ -56,5 +56,9 @@ check-version-ge "wheel-requirement" "${wheel_version}" "0.38.1"
 nbconvert_version=$(python -c "import nbconvert; print(nbconvert.__version__)")
 check-version-ge "nbconvert-requirement" "${nbconvert_version}" "6.5.1"
 
+check "conda-update-conda" bash -c "conda update -y conda"
+check "conda-install" bash -c "conda install -c conda-forge --yes tensorflow"
+check "conda-install" bash -c "conda install -c conda-forge --yes pytorch"
+
 # Report result
 reportResults

src/miniconda/.devcontainer/Dockerfile

@@ -41,16 +41,18 @@ RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
     && usermod -aG conda ${USERNAME} \
     && apt-get clean -y && rm -rf /var/lib/apt/lists/* /tmp/library-scripts/add-notice.sh
 
-# Temporary: Upgrade 'cryptography' due to https://github.com/advisories/GHSA-39hc-v87j-747x
-# 'cryptography' is installed by the base image (continuumio/miniconda3) which does not have the patch.
-RUN python3 -m pip install --upgrade cryptography
-
 # Copy environment.yml (if found) to a temp locaition so we update the environment. Also
 # copy "noop.txt" so the COPY instruction does not fail if no environment.yml exists.
 COPY environment.yml* noop.txt /tmp/conda-tmp/
 RUN if [ -f "/tmp/conda-tmp/environment.yml" ]; then umask 0002 && /opt/conda/bin/conda env update -n base -f /tmp/conda-tmp/environment.yml; fi \
     && rm -rf /tmp/conda-tmp
 
+USER vscode
+
+# Temporary: Upgrade 'cryptography' due to https://github.com/advisories/GHSA-39hc-v87j-747x
+# 'cryptography' is installed by the base image (continuumio/miniconda3) which does not have the patch.
+RUN python3 -m conda update -y cryptography
+
 # [Optional] Uncomment this section to install additional OS packages.
 # RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
 #     && apt-get -y install --no-install-recommends <your-package-list-here>

src/miniconda/manifest.json

@@ -38,7 +38,8 @@
 		],
 		"pip": [
 			"certifi",
-			"cryptography"
+			"cryptography",
+			"pyOpenssl"
 		],
 		"other": {
 			"git": {},

src/miniconda/test-project/test.sh

@@ -21,5 +21,7 @@ check "usr-local-etc-config-does-not-exist" test ! -f "/usr/local/etc/gitconfig"
 cryptography_version=$(python -c "import cryptography; print(cryptography.__version__)")
 check-version-ge "cryptography-requirement" "${cryptography_version}" "38.0.3"
 
+check "conda-update-conda" bash -c "conda update -y conda"
+
 # Report result
 reportResults