From dac4e1b73cede82b40492a0e308f8245d0f28655 Mon Sep 17 00:00:00 2001 From: KamilSznajdrowicz Date: Mon, 7 Sep 2026 15:08:25 +0200 Subject: [PATCH] IBX-XXXX: Moved Varnish image to Debian 12 (bookworm) Debian 11 (bullseye) reached end of LTS on 2026-08-31, and its archive is now being decommissioned. `deb.debian.org` and `security.debian.org` still publish the bullseye package indexes, but individual `.deb` files are already disappearing from the pools, so `apt-get install` fails with a 404 mid-build: E: Failed to fetch .../g/gnupg2/gpgsm_2.2.27-2+deb11u3_amd64.deb 404 Not Found E: Failed to fetch .../g/gnupg2/gnupg_2.2.27-2+deb11u3_all.deb 404 Not Found Unable to install GPG! ... Repository installation aborted. This breaks the `varnish` leg of Browser tests in every product repository that uses `doc/docker/varnish.yml`. The 404s come and go depending on which Fastly node the runner hits, so re-running the job is a lottery rather than a fix. Varnish 6.0 LTS is unchanged - `varnish`/`varnish-dev` 6.0.12 are published for bookworm as well, so only the base OS moves here. Verified locally (`docker build --platform linux/amd64`): - the packagecloud script installs GPG and the Varnish repo without 404s - all build dependencies resolve on bookworm - `varnish-modules` 0.15.0 still compiles, `libvmod_xkey.so` is installed - resulting image reports Debian 12 with `varnish 6.0.12-1~bookworm` The same change is needed on 5.0 and 6.0, where the file is identical. Co-Authored-By: Claude Opus 5 (1M context) --- docker/Dockerfile-varnish | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker/Dockerfile-varnish b/docker/Dockerfile-varnish index ea56bcb..c9599b2 100644 --- a/docker/Dockerfile-varnish +++ b/docker/Dockerfile-varnish @@ -1,4 +1,4 @@ -FROM debian:bullseye-slim +FROM debian:bookworm-slim ENV VARNISH_MALLOC_SIZE="256M" \ DEBIAN_FRONTEND=noninteractive @@ -21,7 +21,7 @@ RUN set -xe \ pkg-config \ python3-docutils \ sphinx-common \ - varnish-dev=6.0.12-1~bullseye \ + varnish-dev=6.0.12-1~bookworm \ " \ # Update apt and get dependencies && apt-get update -q -y \ @@ -29,7 +29,7 @@ RUN set -xe \ \ # Get official Varnish package && curl -s ${PACKAGECLOUD_URL} | bash \ - && apt-get install -q -y --allow-unauthenticated --no-install-recommends varnish=6.0.12-1~bullseye $buildDeps \ + && apt-get install -q -y --allow-unauthenticated --no-install-recommends varnish=6.0.12-1~bookworm $buildDeps \ \ # Install varnish modules && curl -A "Docker" -o /tmp/varnish-modules.tar.gz -D - -L -s https://github.com/varnish/varnish-modules/archive/refs/tags/${VARNISH_MODULES_VERSION}.tar.gz \