From 607f2797d4c967630a376273ef0e9ffa949e0703 Mon Sep 17 00:00:00 2001 From: Eddy Moulton Date: Thu, 29 Oct 2026 14:20:08 +1100 Subject: [PATCH 1/2] Use debian bullseye archive for packages --- docker/openssl1.1 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docker/openssl1.1 b/docker/openssl1.1 index a832d355..ff229c73 100644 --- a/docker/openssl1.1 +++ b/docker/openssl1.1 @@ -1,5 +1,9 @@ FROM debian:bullseye-slim +# Bullseye is past end of life. deb.debian.org still serves its indexes but has +# purged the security pool, so packages come from the archive. +RUN sed -i 's|deb.debian.org|archive.debian.org|g' /etc/apt/sources.list + RUN apt-get update && apt-get install -y --no-install-recommends \ build-essential \ cmake \ From f5071e4b253e33cf563572c4b8a2f5c2536190ca Mon Sep 17 00:00:00 2001 From: Eddy Moulton Date: Thu, 29 Oct 2026 14:49:27 +1100 Subject: [PATCH 2/2] Apply fix to the smoke test too --- smoke-test/linux/Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/smoke-test/linux/Dockerfile b/smoke-test/linux/Dockerfile index 2bd123a8..2ebb75e0 100644 --- a/smoke-test/linux/Dockerfile +++ b/smoke-test/linux/Dockerfile @@ -3,12 +3,15 @@ ARG BUILD_BASE=debian:bookworm ARG RUNTIME_BASE=debian:bookworm-slim FROM ${BUILD_BASE} AS build +# deb.debian.org has purged bullseye's security pool, so bullseye installs need the archive. +RUN . /etc/os-release && if [ "$VERSION_CODENAME" = bullseye ]; then sed -i 's|deb.debian.org|archive.debian.org|g' /etc/apt/sources.list; fi RUN apt-get update && apt-get install -y --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/* COPY loader.c /loader.c RUN gcc -O2 -o /loader /loader.c -ldl FROM ${RUNTIME_BASE} ARG RUNTIME_PKGS="" +RUN . /etc/os-release && if [ "$VERSION_CODENAME" = bullseye ]; then sed -i 's|deb.debian.org|archive.debian.org|g' /etc/apt/sources.list; fi RUN if [ -n "$RUNTIME_PKGS" ]; then apt-get update && apt-get install -y --no-install-recommends $RUNTIME_PKGS && rm -rf /var/lib/apt/lists/*; fi COPY --from=build /loader /usr/local/bin/loader COPY native/ /native/