From 9b9a9b0a3dfb6df59bc1966f970f9a2de88b7d54 Mon Sep 17 00:00:00 2001 From: Evan Vetere Date: Wed, 21 Oct 2026 11:21:40 -0400 Subject: [PATCH] fix: move the datum-connect image to Debian 13 The runtime image ships Debian 12's ca-certificates, which still trusts "emSign ECC Root CA - G3". Debian 13's ca-certificates 20250419+deb13u1 drops it, and Debian 12 is now LTS-only. Key changes: - Run on debian:trixie-slim and build on rust:1.98-trixie so the binary links against the same glibc it runs on - Install libssl3t64, trixie's name for libssl3 --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index b18d0bb..6ca3553 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM --platform=$BUILDPLATFORM rust:1.98-bookworm AS builder +FROM --platform=$BUILDPLATFORM rust:1.98-trixie AS builder ARG BUILDARCH ARG TARGETARCH @@ -42,10 +42,10 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \ && cargo build --locked --release -p datum-connect --target "$target" \ && cp "target/$target/release/datum-connect" /usr/local/bin/datum-connect -FROM debian:bookworm-slim +FROM debian:trixie-slim RUN apt-get update \ - && apt-get install -y --no-install-recommends ca-certificates libssl3 \ + && apt-get install -y --no-install-recommends ca-certificates libssl3t64 \ && rm -rf /var/lib/apt/lists/* \ && useradd -u 65532 -r -s /usr/sbin/nologin datum \ && install -d -o 65532 -g 65532 /var/lib/datum-connect