Skip to content

Bump squid image to Alpine 3.24 - #329

Merged
mxschmitt merged 2 commits into
mainfrom
fix/squid-apk-tls
Sep 4, 2026
Merged

Bump squid image to Alpine 3.24#329
mxschmitt merged 2 commits into
mainfrom
fix/squid-apk-tls

Conversation

@mxschmitt

@mxschmitt mxschmitt commented Sep 4, 2026

Copy link
Copy Markdown
Owner

Summary

  • build (squid) on main failed with TLS: unspecified error fetching Alpine APKINDEX, then squid (no such package). The previous main build succeeded minutes earlier on the same Dockerfile, so this was likely a CDN blip rather than a missing package.
  • Bump the squid image from Alpine 3.23 to current stable 3.24 and install squid before copying squid.conf.

Test plan

  • Confirm build (squid) is green on this PR
  • Confirm full CI succeeds so production autoupdate can deploy main

CI failed because apk could not fetch APKINDEX over TLS from dl-cdn, which then looked like a missing squid package.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-04T05:08:41.842397Z 4509fcd PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4509fcdd27

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread squid/Dockerfile Outdated
Comment on lines +13 to +14
"${mirror}/v3.23/main" \
"${mirror}/v3.23/community" \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Derive the repository branch from the base image

When FROM alpine:3.23 is later upgraded without also changing these new literals, the image will continue fetching v3.23 packages into the newer Alpine base. The previous default repositories automatically matched the selected image, whereas this can now cause dependency/ABI conflicts or leave Squid on an older security-update stream while the build still appears successful; preserve the base image's repository paths when swapping mirror hosts or derive the branch from the installed Alpine release.

Useful? React with 👍 / 👎.

The failed CI job looked like a transient Alpine CDN TLS error; moving to the current stable release picks up newer apk/ca-certificates.
@mxschmitt mxschmitt changed the title Fix squid CI image build Alpine TLS flakes Bump squid image to Alpine 3.24 Sep 4, 2026
@mxschmitt
mxschmitt merged commit 91f586d into main Sep 4, 2026
10 checks passed
@mxschmitt
mxschmitt deleted the fix/squid-apk-tls branch September 4, 2026 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant