[bitnami/clickhouse] Release clickhouse-24.12.3-debian-12-r0 (#76244)

Signed-off-by: Bitnami Bot <bitnami-bot@vmware.com>

bitnami/clickhouse/24/debian-12/Dockerfile

@@ -8,15 +8,15 @@ ARG TARGETARCH
 
 LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
       org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2024-12-31T12:57:52Z" \
+      org.opencontainers.image.created="2025-01-14T15:36:03Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/clickhouse/README.md" \
       org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.ref.name="24.12.2-debian-12-r0" \
+      org.opencontainers.image.ref.name="24.12.3-debian-12-r0" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/clickhouse" \
       org.opencontainers.image.title="clickhouse" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="24.12.2"
+      org.opencontainers.image.version="24.12.3"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -29,7 +29,7 @@ SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
 RUN install_packages ca-certificates curl procps xmlstarlet
 RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
     COMPONENTS=( \
-      "clickhouse-24.12.2-0-linux-${OS_ARCH}-debian-12" \
+      "clickhouse-24.12.3-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -48,7 +48,7 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 
 COPY rootfs /
 RUN /opt/bitnami/scripts/clickhouse/postunpack.sh
-ENV APP_VERSION="24.12.2" \
+ENV APP_VERSION="24.12.3" \
     BITNAMI_APP_NAME="clickhouse" \
     PATH="/opt/bitnami/clickhouse/bin:/opt/bitnami/common/bin:$PATH" \
     clickhouseCTL_API="3"

bitnami/clickhouse/24/debian-12/prebuildfs/opt/bitnami/.bitnami_components.json

@@ -3,6 +3,6 @@
         "arch": "amd64",
         "distro": "debian-12",
         "type": "NAMI",
-        "version": "24.12.2-0"
+        "version": "24.12.3-0"
     }
 }

bitnami/clickhouse/24/debian-12/rootfs/opt/bitnami/scripts/clickhouse/postunpack.sh

@@ -68,6 +68,13 @@ ln -s "$CLICKHOUSE_CONF_DIR" "/etc/clickhouse-server"
 ln -s "$CLICKHOUSE_LOG_DIR" "/var/log/clickhouse-server"
 ln -s "$CLICKHOUSE_TMP_DIR" "/var/lib/clickhouse/tmp"
 
+# ClickHouse uses some algorithms that are not FIPS compliant
+# hence we cannot import the FIPS configuration for OpenSSL
+# ref: https://vmw-jira.broadcom.net/browse/TNZ-25623
+if [[ "$(get_os_metadata --id)" == "photon" ]]; then
+    remove_in_file "/etc/ssl/distro.cnf" "\.include \/etc\/ssl\/provider_fips\.cnf"
+fi
+
 ln -s /dev/stdout "$CLICKHOUSE_LOG_FILE"
 ln -s /dev/stderr "$CLICKHOUSE_ERROR_LOG_FILE"
 

bitnami/clickhouse/24/debian-12/tags-info.yaml

@@ -1,5 +1,5 @@
 rolling-tags:
 - "24"
 - 24-debian-12
-- 24.12.2
+- 24.12.3
 - latest

bitnami/clickhouse/README.md

@@ -356,7 +356,7 @@ If you encountered a problem running this container, you can file an [issue](htt
 
 ## License
 
-Copyright © 2024 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
+Copyright © 2025 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.