feat: update to 3.10.2 and fews issues on logs and db (#180)

.github/workflows/release.yml

@@ -23,5 +23,5 @@ jobs:
           platforms: linux/amd64,linux/arm64
           push: true
           python_base_image: 3.12.7-slim-bullseye
-          pi_version: '3.10.1'
+          pi_version: '3.10.2'
           is_default_version: true

Dockerfile

@@ -1,5 +1,5 @@
 ARG BASE_IMAGE_TAG=3.12.7-slim-bullseye
-ARG PI_VERSION=3.10.1
+ARG PI_VERSION=3.10.2
 ARG PI_HOME=/opt/privacyidea
 
 FROM python:$BASE_IMAGE_TAG AS builder
@@ -29,8 +29,8 @@ ENV PI_SKIP_BOOTSTRAP=false \
 COPY prebuildfs /
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN install_packages ca-certificates gettext-base tini tree jq libpq5 realmd krb5-user curl && \
-    mkdir -p "$PI_DATA_DIR" "$PI_CFG_DIR" && \
-    chown -R nobody:nogroup "$PI_DATA_DIR" "$PI_CFG_DIR"
+    mkdir -p "$PI_DATA_DIR" "$PI_CFG_DIR" /var/log/privacyidea && \
+    chown -R nobody:nogroup "$PI_DATA_DIR" "$PI_CFG_DIR" /var/log/privacyidea
 USER nobody
 WORKDIR "$PI_HOME"
 COPY --from=builder /opt/privacyidea .

rootfs/opt/privacyidea/pi-logging.yml

@@ -9,12 +9,16 @@ handlers:
     class: logging.StreamHandler
     level: INFO
     formatter: detail
+  file:
+    # Rollover the logfile at midnight
+    class: logging.handlers.RotatingFileHandler
+    backupCount: 5
+    maxBytes: 1000000
+    formatter: detail
+    level: INFO
+    filename: /var/log/privacyidea/privacyidea.log
 
 loggers:
   privacyidea:
     level: INFO
-    handlers: [console]
-
-root:
-  level: WARNING
-  handlers: [console]
+    handlers: [file]

rootfs/opt/templates/pi-config.template

@@ -16,7 +16,8 @@ if PI_PEPPER is None:
 SUPERUSER_REALM = os.environ.get('PI_SUPERUSER_REALM','administrator').split(',')
 
 SQLALCHEMY_DATABASE_URI = "$SQLALCHEMY_DATABASE_URI"
-SQLALCHEMY_ENGINE_OPTIONS = {"pool_pre_ping": True, "pool_recycle": 3600, "pool_size":10, "pool_timeout": 30, "max_overflow": 20}
+# Update SQLALCHEMY_ENGINE_OPTIONS accordingly to your needs
+# SQLALCHEMY_ENGINE_OPTIONS = {"pool_pre_ping": True, "pool_recycle": 3600, "pool_size":10, "pool_timeout": 30, "max_overflow": 20}
 PI_ENCFILE = os.environ.get("PI_ENCFILE", "/data/privacyidea/keys/encfile")
 PI_HSM = os.environ.get("PI_HSM", "default")
 PI_AUDIT_NO_SIGN = os.environ.get("PI_AUDIT_NO_SIGN", "False").lower() == "true"