fix(dockerfiles/cd/builders/tiflash): upgrade openssl with conda pre-build package

[wuhuizuo]

Signed-off-by: wuhuizuo wuhuizuo@126.com

[ti-chi-bot]

I have already done a preliminary review for you, and I hope to help you do a better job.

Based on the pull request title and description, the key changes are upgrading OpenSSL with a conda pre-build package in a Dockerfile. The diff shows that the changes are only made to the dockerfiles/cd/builders/tiflash/Dockerfile.

There are a few potential problems with the changes made in this pull request. Firstly, the new package is being installed from an external source (conda.anaconda.org), which could potentially introduce security risks or version incompatibilities. Secondly, the curl command used to download the package is using the -sL flag, which could potentially silently fail without proper error handling. Lastly, the tarball extraction command uses -z and -C flags interchangeably, which could cause confusion and potential errors.

To improve this pull request, it is recommended to use a more secure and version-controlled package source, such as an internal package repository or a trusted public repository. Additionally, it is recommended to add proper error handling for the curl command and use consistent flags for the tarball extraction command.

[ti-chi-bot]

I have already done a preliminary review for you, and I hope to help you do a better job.

Based on the pull request title and description, the changes made in this pull request are upgrading openssl with a conda pre-build package in the dockerfiles/cd/builders/tiflash directory.

Potential problems:

• There is no test included in this pull request to ensure that the upgrade works as expected. It would be good to have some test cases to verify that the upgrade does not cause any issues.
• It is unclear why openssl was not updated to version 1.1.1w in the previous implementation. This should be explained in the pull request description or in the commit message.

Fixing suggestions:

• Add some test cases to ensure that the upgrade works as expected.
• Clarify why openssl was not updated to version 1.1.1w in the previous implementation.

Overall, the changes look good, but adding test cases and clarifying the reason for not updating openssl to version 1.1.1w would make the pull request more robust.

[wuhuizuo]

desc: do not install the old openssl pkg.

[wuhuizuo]

/approve

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: wuhuizuo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [wuhuizuo]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment