Skip to content

Fix SSL connection from Memgraph Docker container and packaging issues#3793

Merged
mattkjames7 merged 9 commits intomasterfrom
ssl-fix
Feb 17, 2026
Merged

Fix SSL connection from Memgraph Docker container and packaging issues#3793
mattkjames7 merged 9 commits intomasterfrom
ssl-fix

Conversation

@mattkjames7
Copy link
Contributor

@mattkjames7 mattkjames7 commented Feb 16, 2026

  • Memgraph's Docker container is missing ca-certificates package - meaning that pulling data using LOAD CSV fails (see Problem with the SSL CA cert when using LOAD CSV #3791) - this package has been added to the dockerfile and a smoke test has been added to check that this feature still works in the future.
  • The License files were incorrectly being copied into the query_modules directory when building MAGE with the setup Python script - now only the grappolo license is copied, as was the behaviour before MAGE was merged into Memgraph (fixes this issue: License files inside the wrong directory #3790).
  • Licenses were missing from final Docker container image under /usr/share/doc/memgraph/, but directory tree existed and the files existed within the DEB package -> the reason for this was that Ubuntu's dpkg exclusion configuration has changed, so now an exception must be made for our license files.
  • ISSU tests were failing since the updates to https://github.com/memgraph/helm-charts since the 3.8.0 release of Memgraph, due to increased automation within the helm charts -> removing setup.cypherl and updating logic to check for pods fixed this in ISSU fix #3796).
  • Fixed source of flakiness in checking for mgconsole after packaging - if grep exited before echo had finished, then there would be a broken pipe.
  • Upgraded crypotography version to address a couple of high severity CVEs.

@mattkjames7 mattkjames7 added this to the mg-v3.8.1 milestone Feb 16, 2026
@mattkjames7 mattkjames7 self-assigned this Feb 16, 2026
@mattkjames7 mattkjames7 added bug bug infrastructure build system, packaging, libraries Docs unnecessary Docs unnecessary labels Feb 16, 2026
@mattkjames7
Copy link
Contributor Author

mattkjames7 commented Feb 16, 2026

Tracking

  • [Link to Epic/Issue]

Standard development

CI Testing Labels

  • Select the appropriate CI test labels (CI -build=build-name -test=test-suite)

Documentation checklist

  • Add the documentation label
  • Add the bug / feature label
  • Add the milestone for which this feature is intended
    • If not known, set for a later milestone
  • Write a release note, including added/changed clauses
    • Fixed using LOAD CSV via SSL, by adding missing ca-certificates package to the Memgraph Docker image #3793
  • [ Documentation PR link memgraph/documentation#XXXX ]
    • Is back linked to this development PR

@mattkjames7 mattkjames7 added Docs - changelog only Docs - changelog only and removed Docs unnecessary Docs unnecessary labels Feb 16, 2026
@mattkjames7 mattkjames7 marked this pull request as ready for review February 16, 2026 15:07
@mattkjames7 mattkjames7 requested a review from DavIvek February 16, 2026 15:07
@sonarqubecloud
Copy link

@mattkjames7 mattkjames7 changed the title Fix SSL connection from Memgraph Docker container Fix SSL connection from Memgraph Docker container and packaging issues Feb 16, 2026
@mattkjames7 mattkjames7 linked an issue Feb 16, 2026 that may be closed by this pull request
@mattkjames7 mattkjames7 added this pull request to the merge queue Feb 17, 2026
Merged via the queue into master with commit ef288ff Feb 17, 2026
62 checks passed
@mattkjames7 mattkjames7 deleted the ssl-fix branch February 17, 2026 09:31
mattkjames7 added a commit that referenced this pull request Feb 17, 2026
#3793)

- Memgraph's Docker container is missing `ca-certificates` package -
meaning that pulling data using LOAD CSV fails (see
#3791) - this package has
been added to the dockerfile and a smoke test has been added to check
that this feature still works in the future.
- The License files were incorrectly being copied into the
`query_modules` directory when building MAGE with the `setup` Python
script - now only the grappolo license is copied, as was the behaviour
before MAGE was merged into Memgraph (fixes this issue:
#3790).
- Licenses were missing from final Docker container image under
`/usr/share/doc/memgraph/`, but directory tree existed and the files
existed within the DEB package -> the reason for this was that Ubuntu's
`dpkg` exclusion configuration has changed, so now an exception must be
made for our license files.
- ISSU tests were failing since the updates to
https://github.com/memgraph/helm-charts since the `3.8.0` release of
Memgraph, due to increased automation within the helm charts -> removing
`setup.cypherl` and updating logic to check for pods fixed this in
#3796).
- Fixed source of flakiness in checking for `mgconsole` after packaging
- if `grep` exited before `echo` had finished, then there would be a
broken pipe.
- Upgraded `crypotography` version to address a couple of high severity
CVEs.
github-merge-queue bot pushed a commit that referenced this pull request Feb 17, 2026
Added a check at the end of the `package_memgraph` function to confirm
that the package contains the primary set of licenses.
Also added a smoke test to check for license files inside the Docker
containers - while working on #3793 I found that `dpkg` has started
ignoring files under `/usr/share/docs` when installing DEB packages,
meaning that our license files would not be installed during the image
build, even though they exist in the DEB package itself.
github-merge-queue bot pushed a commit that referenced this pull request Feb 18, 2026
Added a check at the end of the `package_memgraph` function to confirm
that the package contains the primary set of licenses.
Also added a smoke test to check for license files inside the Docker
containers - while working on #3793 I found that `dpkg` has started
ignoring files under `/usr/share/docs` when installing DEB packages,
meaning that our license files would not be installed during the image
build, even though they exist in the DEB package itself.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug bug Docs - changelog only Docs - changelog only infrastructure build system, packaging, libraries

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Problem with the SSL CA cert when using LOAD CSV License files inside the wrong directory

2 participants