From 1c6ccee8454f7b7583386e06a8ab54f844452b13 Mon Sep 17 00:00:00 2001 From: vishalan Date: Wed, 11 Nov 2026 14:22:13 +0530 Subject: [PATCH] build(docker): move base image from EOL bullseye to bookworm python:3.11-slim-bullseye is Debian 11 (end of life): its apt mirrors return 404, so any build without cached layers fails, and the OS no longer receives security fixes. Switch to python:3.11-slim-bookworm (same Python minor version). On bookworm "netcat" is a virtual package and cannot be installed by name; install netcat-traditional, which is what the alias resolved to on bullseye, so `nc -z` in docker-compose.yml behaves as before. Co-Authored-By: Claude Sonnet 5.5 --- Dockerfile | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 9b770227..51134662 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ # Based on an AMI ############################################################ # Set the base image to use to Ubuntu -FROM python:3.11-slim-bullseye AS base +FROM python:3.11-slim-bookworm AS base ENV DJANGO_SETTINGS_MODULE=EnigmaAutomation.settings RUN DEBIAN_FRONTEND=noninteractive \ @@ -14,7 +14,9 @@ RUN DEBIAN_FRONTEND=noninteractive \ && apt-get autoremove -y # Set env variables used in this Dockerfile (add a unique prefix, such as DEV) -RUN apt update && apt install -y netcat dnsutils libmariadb-dev +# netcat-traditional is what the old "netcat" alias resolved to on bullseye; +# on bookworm "netcat" is a virtual package and cannot be installed by name. +RUN apt update && apt install -y netcat-traditional dnsutils libmariadb-dev ARG APPUID=1001 # Own group for the app user (not gid 0 / root group) so a container escape