From aa07c86d0ecc72fb11b45b52aed3c26cb1dce67e Mon Sep 17 00:00:00 2001 From: Juan Pasutti Date: Mon, 21 Sep 2026 14:13:58 -0300 Subject: [PATCH] fix: move Docker base images to bookworm and pin uv's interpreter Signed-off-by: Juan Pasutti --- docker/backend/Dockerfile | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docker/backend/Dockerfile b/docker/backend/Dockerfile index 344756a06..25d5abaae 100644 --- a/docker/backend/Dockerfile +++ b/docker/backend/Dockerfile @@ -2,7 +2,7 @@ -FROM golang:1.23-bullseye AS golang-builder +FROM golang:1.23-bookworm AS golang-builder # Write final binaries to / so it's easy to copy them out ENV GOBIN=/ @@ -17,7 +17,7 @@ RUN go install github.com/ossf/scorecard/v5@v5.1.1 \ ######################################## -FROM python:3.11-slim-bullseye +FROM python:3.11-slim-bookworm LABEL org.opencontainers.image.authors="CHAOSS https://chaoss.community" LABEL org.opencontainers.image.licenses="MIT" @@ -64,6 +64,9 @@ ENV UV_LINK_MODE=copy # Assert that the lockfile (uv.lock) is up-to-date. Use `uv lock` to update it # manually if this fails the container build. ENV UV_LOCKED=1 +# PATH lists /usr/bin first, where bookworm ships a python3.11 without +# development headers that uv would otherwise pick, failing to build psutil. +ENV UV_PYTHON=/usr/local/bin/python3.11 WORKDIR /collectoss