promptflow fails to create connection in python 3.12.10, which is perfectly working in ptyhon 3.10.14 in Docker container,

[RChansdS]

Help on solving this problem ?
likely getpass() method is failing, but not sure how to fix it.

=> ERROR [stage-1 15/16] RUN pf connection create --file src/connections/cognitive_search_connection.yaml 9.8s

[stage-1 15/16] RUN pf connection create --file src/connections/cognitive_search_connection.yaml:
7.759 /usr/local/lib/python3.12/getpass.py:91: GetPassWarning: Can not control echo on the terminal.
7.759 passwd = fallback_getpass(prompt, stream)
7.759 Warning: Password input may be echoed.
7.759 Please set a password for your new keyring: Traceback (most recent call last):
7.853 File "/usr/local/lib/python3.12/getpass.py", line 69, in unix_getpass
7.853 old = termios.tcgetattr(fd) # a copy to save
7.853 ^^^^^^^^^^^^^^^^^^^^^
7.853 termios.error: (25, 'Inappropriate ioctl for device')
7.853
7.853 During handling of the above exception, another exception occurred:
7.853
7.853 Traceback (most recent call last):
7.853 File "/opt/venv/bin/pf", line 10, in
7.853 sys.exit(main())
7.853 ^^^^^^
7.853 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/pf.py", line 14, in main
7.853 _main()
7.853 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/entry.py", line 156, in main
7.853 entry(command_args)
7.853 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/entry.py", line 137, in entry
7.853 cli_exception_and_telemetry_handler(run_command, activity_name)(args)
7.853 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_utils.py", line 276, in wrapper
7.854 raise e
7.854 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_utils.py", line 264, in wrapper
7.854 return func(*args, **kwargs)
7.854 ^^^^^^^^^^^^^^^^^^^^^
7.854 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/entry.py", line 88, in run_command
7.854 raise ex
7.854 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/entry.py", line 64, in run_command
7.854 dispatch_connection_commands(args)
7.854 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/_connection.py", line 256, in dispatch_connection_commands
7.854 create_connection(args.file, args.params_override, args.name)
7.854 File "/opt/venv/lib/python3.12/site-packages/promptflow/_cli/_pf/_connection.py", line 205, in create_connection
7.854 connection = _get_pf_client().connections.create_or_update(connection, with_secrets=False)
7.855 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.855 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/_telemetry/activity.py", line 265, in wrapper
7.855 return f(self, *args, **kwargs)
7.855 ^^^^^^^^^^^^^^^^^^^^^^^^
7.855 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/operations/_connection_operations.py", line 87, in create_or_update
7.855 orm_object = connection._to_orm_object()
7.855 ^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.855 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/entities/_connection.py", line 247, in _to_orm_object
7.855 secrets = self._validate_and_encrypt_secrets()
7.855 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.855 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/entities/_connection.py", line 114, in _validate_and_encrypt_secrets
7.855 encrypt_secrets[k] = encrypt_secret_value(v)
7.855 ^^^^^^^^^^^^^^^^^^^^^^^
7.855 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/_utilities/general_utils.py", line 156, in encrypt_secret_value
7.856 encryption_key = get_encryption_key(generate_if_not_found=True)
7.856 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.856 File "/opt/venv/lib/python3.12/site-packages/promptflow/_sdk/_utilities/general_utils.py", line 149, in get_encryption_key
7.856 keyring.set_password(KEYRING_SYSTEM, KEYRING_ENCRYPTION_KEY_NAME, ENCRYPTION_KEY_IN_KEY_RING)
7.856 File "/opt/venv/lib/python3.12/site-packages/keyring/core.py", line 61, in set_password
7.856 get_keyring().set_password(service_name, username, password)
7.856 File "/opt/venv/lib/python3.12/site-packages/keyring/backends/chainer.py", line 56, in set_password
7.856 return keyring.set_password(service, username, password)
7.856 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.856 File "/opt/venv/lib/python3.12/site-packages/keyrings/alt/file_base.py", line 123, in set_password
7.856 password_encrypted = self.encrypt(password.encode('utf-8'), assoc)
7.856 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.856 File "/opt/venv/lib/python3.12/site-packages/keyrings/alt/file.py", line 202, in encrypt
7.857 cipher = self._create_cipher(self.keyring_key, salt, IV)
7.857 ^^^^^^^^^^^^^^^^
7.857 File "/opt/venv/lib/python3.12/site-packages/jaraco/classes/properties.py", line 76, in get
7.857 return self.fget(obj)
7.857 ^^^^^^^^^^^^^^
7.857 File "/opt/venv/lib/python3.12/site-packages/keyrings/alt/file.py", line 101, in keyring_key
7.857 self._init_file()
7.857 File "/opt/venv/lib/python3.12/site-packages/keyrings/alt/file.py", line 108, in _init_file
7.857 self.keyring_key = self._get_new_password()
7.857 ^^^^^^^^^^^^^^^^^^^^^^^^
7.857 File "/opt/venv/lib/python3.12/site-packages/keyrings/alt/file.py", line 66, in _get_new_password
7.857 password = getpass.getpass("Please set a password for your new keyring: ")
7.857 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.857 File "/usr/local/lib/python3.12/getpass.py", line 91, in unix_getpass
7.857 passwd = fallback_getpass(prompt, stream)
7.857 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7.857 File "/usr/local/lib/python3.12/getpass.py", line 126, in fallback_getpass
7.858 return _raw_input(prompt, stream)
7.858 ^^^^^^^^^^^^^^^^^^^^^^^^^^
7.858 File "/usr/local/lib/python3.12/getpass.py", line 148, in _raw_input
7.858 raise EOFError
7.858 EOFError

---

1 warning found (use docker --debug to expand):

• JSONArgsRecommended: JSON arguments recommended for CMD to prevent unintended behavior related to OS signals (line 140)
  Dockerfile:129

---

127 |
128 | # Create connections
129 | >>> RUN pf connection create --file src/connections/cognitive_search_connection.yaml
130 | RUN pf connection create --file src/connections/azure_open_ai_connection.yaml
131 | # RUN echo "pf connection created"

ERROR: failed to solve: process "/bin/sh -c pf connection create --file src/connections/cognitive_search_connection.yaml" did not complete successfully: exit code: 1

[aniruddhaadak80]

From my point of view, this looks less like a Python 3.12 incompatibility and more like a headless keyring bootstrap problem inside Docker. The failure path goes through secret encryption and then blocks on an interactive password prompt, which is exactly the kind of thing that works locally and collapses in a non-TTY build step.

The clean fix is usually a noninteractive secret backend or an explicit way to inject the encryption key in CI and containers, rather than relying on getpass during image build.