chore: Use slim image in Dockerfile

[EugeneTorap]

SUMMARY

Use slim image for python and nodeJS. Final slim python image will be 500 MB less.
Use slim image for modeJS no reduce downloading time.
Remove installing npm 7 because nodeJS 16 already has npm 8 which the same like npm 7

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[villebro]

Thanks for the PR. I would advise splitting this PR in two:

• First one changes from the full images to the slim ones
• Second one bumps the main Python version from 3.8 to 3.9. In practice this would mean bumping the versions on CI so that 3.8 is replaced by 3.9 and 3.9 is replaced by 3.10.

Finally to get started with deprecating 3.8, we would need to notify the mailing list about the upcoming deprecation well in advance (3-6 months ahead of happening).

[villebro]

One comment about npm version, other than that I think this is a great improvement 👍

[villebro]

LGTM, but would be interested in getting some other reviewers on this, as it's a pretty major change.

[zhaoyongjie]

LGTM, the only concern is whether slim image lacks some system tools or third-part tools(e.g. wget), If users don't depend on system tools in a container, it will be a safe change.

[EugeneTorap]

@villebro @zhaoyongjie
It's good practice to use the final image as light as possible to reduce the number of vulnerabilities and downloading time.
Sure, after that, users need to install some system or third-part tools in our final image or manually build superset from full python image. But such users who customize the final image are a minority.

[EugeneTorap]

@betodealmeida @dpgaspar ^^

[mdeshmu]

@EugeneTorap Thanks for a very useful change. Here is AWS ECR scan reports for comparison:

Before change:
Critical - 2
High - 19
Medium - 108

After Change:
Critical - 1
High - 6
Medium - 50

IMO, Its a big improvement. Bumping python to 3.9 should further reduce vulnerabilities as most of the remaining critical and high vulnerabilities are Linux related.