Private
Public Access
1
0

fix(docker): add PostgreSQL APT repo for postgresql-client-16
Some checks failed
CI Pipeline / Rust Format Check (pull_request) Successful in 4s
CI Pipeline / Clippy Lints (pull_request) Successful in 52s
CI Pipeline / Rust Unit Tests (pull_request) Failing after 1m21s
CI Pipeline / Security Audit (pull_request) Successful in 5s
CI Pipeline / Frontend Lint & Type Check (pull_request) Successful in 14s
CI Pipeline / Build .deb & Release (pull_request) Has been skipped

Debian Bookworm default repos only ship PostgreSQL 15. The Docker
runtime stage needs postgresql-client-16 for the entrypoint script,
so add the official PGDG APT repository.

- Add PGDG GPG key and sources.list entry for bookworm-pgdg
- Install ca-certificates and curl first (needed for repo setup)
- Purge gnupg2 after use to keep image lean
- Verify argon2 package name is correct for Bookworm (it is)
This commit is contained in:
Draco-Lunaris-Echo
2026-06-07 17:21:37 -05:00
parent 2d3be0955b
commit 455013db8e

View File

@ -60,13 +60,21 @@ RUN npm run build
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
FROM debian:bookworm-slim AS runtime FROM debian:bookworm-slim AS runtime
RUN apt-get update && apt-get install -y \ # Add PostgreSQL APT repository for postgresql-client-16
ca-certificates \ # (Bookworm default repos only ship PostgreSQL 15)
libssl3 \ RUN apt-get update && apt-get install -y ca-certificates curl gnupg2 \
libfontconfig1 \ && curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc \
postgresql-client-16 \ | gpg --dearmor -o /usr/share/keyrings/postgresql-keyring.gpg \
argon2 \ && echo "deb [signed-by=/usr/share/keyrings/postgresql-keyring.gpg] https://apt.postgresql.org/pub/repos/apt bookworm-pgdg main" \
curl \ > /etc/apt/sources.list.d/pgdg.list \
&& apt-get update \
&& apt-get install -y \
libssl3 \
libfontconfig1 \
postgresql-client-16 \
argon2 \
&& apt-get purge -y gnupg2 \
&& apt-get autoremove -y \
&& rm -rf /var/lib/apt/lists/* && rm -rf /var/lib/apt/lists/*
# Create service user # Create service user