[email protected]

notable change:
- fix: core: rootfs.tar path
- core: support deb822 style config
- layer: ruby3: lock gem&bundler verison
- layer package update

Author: dr-js

package-lock.json

@@ -1,7 +1,7 @@
 {
   "private": true,
   "name": "docker-stash",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "A collection of strange functions, for development",
   "author": "dr-js",
   "license": "MIT",

package.json

@@ -19,8 +19,8 @@ runKit(async (kit) => {
 
   const URL_CACHE_HASH = 'https://api.github.com/repos/debuerreotype/docker-debian-artifacts/git/refs/heads' // use all branch info as cache hash
   const URL_CORE_IMAGE_MAP = {
-    'amd64': 'https://github.com/debuerreotype/docker-debian-artifacts/raw/dist-amd64/bookworm/slim/rootfs.tar.xz',
-    'arm64': 'https://github.com/debuerreotype/docker-debian-artifacts/raw/dist-arm64v8/bookworm/slim/rootfs.tar.xz'
+    'amd64': 'https://github.com/debuerreotype/docker-debian-artifacts/raw/dist-amd64/bookworm/slim/oci/blobs/rootfs.tar.gz',
+    'arm64': 'https://github.com/debuerreotype/docker-debian-artifacts/raw/dist-arm64v8/bookworm/slim/oci/blobs/rootfs.tar.gz'
   }
 
   const coreImageBufferMap = await fetchGitHubBufferMapWithLocalCache(URL_CORE_IMAGE_MAP, URL_CACHE_HASH, kit.fromTemp('debian12', 'core-github'))
@@ -49,7 +49,7 @@ runKit(async (kit) => {
     kit.padLog('assemble "/" (context)')
     await resetDirectory(PATH_BUILD)
     for (const DOCKER_BUILD_ARCH_INFO of DOCKER_BUILD_ARCH_INFO_LIST) {
-      await writeBuffer(kit.fromOutput(PATH_BUILD, `rootfs.tar.xz.${DOCKER_BUILD_ARCH_INFO.key}`), coreImageBufferMap[ DOCKER_BUILD_ARCH_INFO.key ])
+      await writeBuffer(kit.fromOutput(PATH_BUILD, `rootfs.tar.gz.${DOCKER_BUILD_ARCH_INFO.key}`), coreImageBufferMap[ DOCKER_BUILD_ARCH_INFO.key ])
       await writeBuffer(kit.fromOutput(PATH_BUILD, `Dockerfile.${DOCKER_BUILD_ARCH_INFO.key}`), dockerfileBufferMap[ DOCKER_BUILD_ARCH_INFO.key ])
     }
 
@@ -89,7 +89,7 @@ const getDockerfileString = ({
 FROM scratch
 
 ${_ && 'use prepared fs'}
-ADD "rootfs.tar.xz.${DOCKER_BUILD_ARCH_INFO.key}" /
+ADD "rootfs.tar.gz.${DOCKER_BUILD_ARCH_INFO.key}" /
 
 LABEL arg.DOCKER_BUILD_ARCH=${JSON.stringify(DOCKER_BUILD_ARCH_INFO.key)}
 ENV DOCKER_BUILD_ARCH=${JSON.stringify(DOCKER_BUILD_ARCH_INFO.key)}
@@ -101,25 +101,21 @@ ENV LANG C.UTF-8
 ENV LC_ALL C.UTF-8
 
 RUN set -ex \\
- && { \\${_ && 'reset apt source list with bookworm-backports'}
-       echo 'deb http://deb.debian.org/debian bookworm main'; \\
-       echo 'deb http://deb.debian.org/debian bookworm-updates main'; \\
-       echo 'deb http://deb.debian.org/debian bookworm-backports main'; \\
-       echo 'deb http://deb.debian.org/debian-security/ bookworm-security main'; \\
-    } > /etc/apt/sources.list \\
- && { \\${_ && 'set apt to use bookworm-backports by default'}
+\\${_ && 'apt: enable backports sources (for deb822 style config)'}
+ && sed -i 's/bookworm-updates/bookworm-updates bookworm-backports/' /etc/apt/sources.list.d/debian.sources \\
+ && { \\${_ && 'apt: use backports by default'}
       echo 'Package: *'; \\
       echo 'Pin: release a=bookworm-backports'; \\
       echo 'Pin-Priority: 800'; \\
     } > /etc/apt/preferences.d/backports \\
- && { \\${_ && 'reset dpkg file filter # https://askubuntu.com/a/628410'}
+ && { \\${_ && 'apt: reset dpkg file filter # https://askubuntu.com/a/628410'}
       echo 'path-exclude=/usr/share/doc/*'; \\
       echo 'path-include=/usr/share/doc/*/copyright'; \\
       echo 'path-exclude=/usr/share/locale/*/LC_MESSAGES/*.mo'; \\
       echo 'path-exclude=/usr/share/man/*'; \\
       echo 'path-exclude=/usr/share/info/*'; \\
     } > /etc/dpkg/dpkg.cfg.d/excludes \\
-\\${_ && 'prepare apt cache # https://github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/experimental.md#example-cache-apt-packages'}
+\\${_ && 'apt: prepare apt cache # https://github.com/moby/buildkit/blob/master/frontend/dockerfile/docs/experimental.md#example-cache-apt-packages'}
  && shopt -s nullglob \\
  && rm -rf \\
       /etc/apt/apt.conf.d/docker-clean \\
@@ -128,7 +124,7 @@ RUN set -ex \\
       /var/lib/apt/* \\
  && echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";'   > /etc/apt/apt.conf.d/keep-cache \\
  && shopt -u nullglob \\
-\\${_ && 'check system time, apt update will fail if the time is off too much'}
+\\${_ && 'apt: check system time, apt update will fail if the time is off too much'}
  && date -uIs
 
 RUN \\${_ && 'check: https://github.com/moby/buildkit/blob/v0.9.0/frontend/dockerfile/docs/syntax.md'}

source/debian12/build-core.js

@@ -87,10 +87,12 @@ apt-update
       libgmp-dev \
       libdb-dev
 
+  rm -rf /usr/local/share/man/*
+
   ruby -r rbconfig -e "puts RbConfig::CONFIG['LIBS']"
 apt-clear
 
-# gem
+# gem # [email protected] [email protected]
   gem install rubygems-update -v 3.4.22 --no-document && update_rubygems # gem update --no-document --system # NOTE: v3.5 requires ruby@3, https://github.com/rubygems/rubygems/issues/2534
   gem-uninstall rubygems-update # remove gem update dependency
 gem-clear

source/debian12/build-layer-script/7-1-ruby2-install.sh

@@ -68,8 +68,8 @@ apt-update
   ruby -r rbconfig -e "puts RbConfig::CONFIG['LIBS']"
 apt-clear
 
-# gem
-  gem update --no-document --system
+# gem # [email protected] [email protected]
+  gem install rubygems-update -v 3.5.23 --no-document && update_rubygems # gem update --no-document --system # NOTE: to lock down bundler version
   gem-uninstall rubygems-update # remove gem update dependency
 gem-clear
 

source/debian12/build-layer-script/7-1-ruby3-install.sh

@@ -1,47 +1,47 @@
 const RES_CORE_DEB12 = [
-  // update at 2024/08/05, to find download start from: https://packages.debian.org/search?keywords=ca-certificates
+  // update at 2024/12/19, start from: https://packages.debian.org/search?keywords=ca-certificates
   [ 'https://ftp.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20230311_all.deb '.trim(), '5308b9bd88eebe2a48be3168cb3d87677aaec5da9c63ad0cf561a29b8219115c' ],
-  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/openssl_3.0.13-1~deb12u1_amd64.deb       '.trim(), '262faebdc38b64e9e0553388e8608b0b6ae1b56871e7a8b09737ab0f2df11f8c' ],
-  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/openssl_3.0.13-1~deb12u1_arm64.deb       '.trim(), 'fe4726cd05854fd6db1efe869e158b34b23789d0742144d2313e060331001dc3' ],
-  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/libssl3_3.0.13-1~deb12u1_amd64.deb       '.trim(), '8e88b98b3fc634721d0899f498d4cf2e62405faaab6582123c7923b1ec8129e1' ],
-  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/libssl3_3.0.13-1~deb12u1_arm64.deb       '.trim(), 'aeffbc4770e2da3a356eb3c8369e79f89623ffc4bc14eb18d6ff29d9bdcb1fba' ],
-  // update at 2023/02/28, to find from: https://packages.debian.org/search?keywords=libjemalloc2
+  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/openssl_3.0.15-1~deb12u1_amd64.deb       '.trim(), 'c9c37660d902f2a43dfbbf619b3f5f413cee298d8f317829e3c11cfff9e174aa' ],
+  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/openssl_3.0.15-1~deb12u1_arm64.deb       '.trim(), '28d03482e8c550bd65930bd41af99bbc9bff1125474010ccec9024ceffc39744' ],
+  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/libssl3_3.0.15-1~deb12u1_amd64.deb       '.trim(), 'd7897e6c55a8d9e229dcf16b0b1d472d7f7be741b2b3b2ac624908ff63215a93' ],
+  [ 'https://ftp.debian.org/debian/pool/main/o/openssl/libssl3_3.0.15-1~deb12u1_arm64.deb       '.trim(), '468debe7aad7bd73592dcdbdab4d778558a4f538efd1b960f24e343fdbc0654d' ],
+  // update at 2023/02/28, check: https://packages.debian.org/search?keywords=libjemalloc2
   [ 'https://ftp.debian.org/debian/pool/main/j/jemalloc/libjemalloc2_5.3.0-1_amd64.deb          '.trim(), 'a4117c23c5c8acf6c9678a6cb086f000b79476369da7efe8a78a70826956ad3d' ],
   [ 'https://ftp.debian.org/debian/pool/main/j/jemalloc/libjemalloc2_5.3.0-1_arm64.deb          '.trim(), '866eba7688ec5cbb98200a05540c4909df6320557371b634b5d394cd32b9f252' ]
 ]
 
 const RES_NODE = [
-  // update at 2024/08/05, to find download, check: ".github/check-layer-package-latest.js"
-  [ 'https://deb.nodesource.com/node_20.x/pool/main/n/nodejs/nodejs_20.16.0-1nodesource1_amd64.deb', 'a78c0997f37bf41e7b8e999ecec49da0a2d46b7db874e6f74932e75e1b9616ed' ],
-  [ 'https://deb.nodesource.com/node_20.x/pool/main/n/nodejs/nodejs_20.16.0-1nodesource1_arm64.deb', '42c7625ea2749c1108c701b6b06197d756a9683b5a1f1645fbdf52c586fb21a4' ],
-  // update at 2024/08/05, to find download from: `{ npm view npm@next-10; npm view @dr-js/core@latest; npm view @dr-js/dev@latest; } | grep -e tarball -e integrity`
-  [ 'https://registry.npmjs.org/npm/-/npm-10.8.2.tgz          '.trim(), 'x/AIjFIKRllrhcb48dqUNAAZl0ig9+qMuN91RpZo3Cb2+zuibfh+KISl6+kVVyktDz230JKc208UkQwwMqyB+w==:sha512:base64' ],
+  // update at 2025/02/14, check: ".github/check-layer-package-latest.js"
+  [ 'https://deb.nodesource.com/node_20.x/pool/main/n/nodejs/nodejs_20.18.3-1nodesource1_amd64.deb', '5ca8dda65890dfb4aa8eb060c3a502aa3e5775d7362ed741b2613fa5cc58ba55' ],
+  [ 'https://deb.nodesource.com/node_20.x/pool/main/n/nodejs/nodejs_20.18.3-1nodesource1_arm64.deb', 'a2dfe2d71946b89ef31b6c150c8c1e98925cc6efc2b73c48199d2b8c151c4cf6' ],
+  // update at 2024/08/05, check: `{ npm view npm@next-10; npm view @dr-js/core@latest; npm view @dr-js/dev@latest; } | grep -e tarball -e integrity`
+  [ 'https://registry.npmjs.org/npm/-/npm-10.9.2.tgz          '.trim(), 'iriPEPIkoMYUy3F6f3wwSZAU93E0Eg6cHwIR6jzzOXWSy+SD/rOODEs74cVONHKSx2obXtuUoyidVEhISrisgQ==:sha512:base64' ],
   [ 'https://registry.npmjs.org/@dr-js/core/-/core-0.5.17.tgz '.trim(), 'xHPK1TEXbvTKyH1UafKZFWqSqZZaYEtTLZ6hVEvYasmm3sFSUPA0rbw/r1DPGRJ7QlLkdzCewS4t11C1B9l0DA==:sha512:base64', 'dr-js-@@@.tgz' ], // NOTE: fix filename
   [ 'https://registry.npmjs.org/@dr-js/dev/-/dev-0.5.14.tgz   '.trim(), 'KWwHsqxHrOtuVNPTq2chms7bXsQnti05UXp7dQIWUGVqOC+nQs6uN1KlIRqwJXZ5eo2pZnNCjk+GQ3RcpEyfjg==:sha512:base64', 'dr-dev-@@@.tgz' ] // NOTE: fix filename
 ]
 const RES_NGINX = [
-  // update at 2024/06/25, to find download from: https://nginx.org/en/download.html
+  // update at 2025/02/14, use Stable version, check: https://nginx.org/en/download.html
   // and: https://github.com/google/ngx_brotli
-  [ 'https://nginx.org/download/nginx-1.26.1.tar.gz             '.trim(), 'f9187468ff2eb159260bfd53867c25ff8e334726237acf227b9e870e53d3e36b' ], // TODO: need to calc hash yourself
+  [ 'https://nginx.org/download/nginx-1.26.3.tar.gz             '.trim(), '69ee2b237744036e61d24b836668aad3040dda461fe6f570f1787eab570c75aa' ], // TODO: need to calc hash yourself
   [ 'https://github.com/google/brotli/archive/ed738e84.zip      '.trim(), 'a68ec12a898abc9cf248f21362620562041b7aab4d623ecd736f39bedf5002a0', 'brotli.zip' ], // specify filename // TODO: need to calc hash yourself
   [ 'https://github.com/google/ngx_brotli/archive/a71f9312.zip  '.trim(), '96f23eb72488ffc570cbc474a928000b05b72f2682456ae357aeaf3ce71c626e', 'ngx-brotli.zip' ] // specify filename // TODO: need to calc hash yourself
 ]
 const RES_GO = [
-  // update at 2024/08/05, to find download from: https://go.dev/dl/
-  [ 'https://go.dev/dl/go1.22.5.linux-amd64.tar.gz', '904b924d435eaea086515bc63235b192ea441bd8c9b198c507e85009e6e4c7f0' ],
-  [ 'https://go.dev/dl/go1.22.5.linux-arm64.tar.gz', '8d21325bfcf431be3660527c1a39d3d9ad71535fabdf5041c826e44e31642b5a' ]
+  // update at 2025/02/14, use 2nd-recent-minor version, check: https://go.dev/dl/
+  [ 'https://go.dev/dl/go1.23.6.linux-amd64.tar.gz', '9379441ea310de000f33a4dc767bd966e72ab2826270e038e78b2c53c2e7802d' ],
+  [ 'https://go.dev/dl/go1.23.6.linux-arm64.tar.gz', '561c780e8f4a8955d32bf72e46af0b5ee5e0debe1e4633df9a03781878219202' ]
 ]
-// update at 2024/08/05, to find download, check: ".github/check-layer-package-latest.js"
+// update at 2025/02/14, check: ".github/check-layer-package-latest.js"
 const RES_F_BIT_DEB12 = [
-  [ 'https://packages.fluentbit.io/debian/bookworm/pool/main/f/fluent-bit/fluent-bit_3.1.4_amd64.deb', '4bc8dc02645cb1203f3189e19feada36cd69335839d69a56067bafd5f1fafe9f' ],
-  [ 'https://packages.fluentbit.io/debian/bookworm/pool/main/f/fluent-bit/fluent-bit_3.1.4_arm64.deb', 'de482e008e9b21fb4a55321435d6287a44ff04abc8f89ce9b91480ce803573a8' ]
+  [ 'https://packages.fluentbit.io/debian/bookworm/pool/main/f/fluent-bit/fluent-bit_3.2.6_amd64.deb', 'd3104d1ef5c3aef4487d8802e35de413e2b8e9e9411560b39f825519e04be247' ],
+  [ 'https://packages.fluentbit.io/debian/bookworm/pool/main/f/fluent-bit/fluent-bit_3.2.6_arm64.deb', 'e707a5521067ec19f8c3f35a0b9802a04671c49ce61effb23bd04220120449ab' ]
 ]
-// update at 2024/06/25, to find download from: https://www.ruby-lang.org/en/downloads/releases/
+// update at 2024/06/25, from: https://www.ruby-lang.org/en/downloads/releases/
 // TODO: Ruby 2.7 reaches EOL
 const RES_RUBY2 = [
   [ 'https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.8.tar.gz', 'c2dab63cbc8f2a05526108ad419efa63a67ed4074dbbcf9fc2b1ca664cb45ba0' ],
   // for manual build openssl1.1 on Deb12, check: https://github.com/rbenv/ruby-build/discussions/1940#discussioncomment-3724881
-  // update at 2024/06/25, to find download, check: https://github.com/rbenv/ruby-build/blob/v20240612/share/ruby-build/2.7.8
+  // update at 2024/06/25, check: https://github.com/rbenv/ruby-build/blob/v20240612/share/ruby-build/2.7.8
   [ 'https://www.openssl.org/source/openssl-1.1.1w.tar.gz', 'cf3098950cb4d853ad95c0841f1f9c6d3dc102dccfcacd521d93925208b76ac8' ]
 ]
 // TODO: NOTE:
@@ -50,10 +50,12 @@ const RES_RUBY2 = [
 //   const RES_RUBY3 = [ [ 'https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.3.tar.gz', '83c05b2177ee9c335b631b29b8c077b4770166d02fa527f3a9f6a40d13f3cce2' ] ]
 const RES_RUBY3 = [ [ 'https://cache.ruby-lang.org/pub/ruby/3.1/ruby-3.1.6.tar.gz', '0d0dafb859e76763432571a3109d1537d976266be3083445651dc68deed25c22' ] ]
 
-// update at 2024/08/05, check version at: https://github.com/puppeteer/puppeteer/releases/latest
+// update at 2024/08/05, check version at: https://github.com/puppeteer/puppeteer/releases
 // and version mapping from Chrome => Puppeteer: https://github.com/puppeteer/puppeteer/blob/main/versions.json
-const PPTR_VER = '22.15.0' // ['127.0.6533.88', 'v22.15.0']
-const PPTR_VER_ARM64_DEB12 = '22.13.1' // ['126.0.6478.182', 'v22.13.1'] // https://packages.debian.org/bookworm/chromium (127.0.6533.88-1~deb12u1_amd64/126.0.6478.182-1~deb12u1_arm64)
+const PPTR_VER = '22.15.0' // [ 'v22.15.0', { "chrome": "127.0.6533.88", "firefox": "latest" } ]
+const PPTR_VER_ARM64_DEB12 = '22.15.0' // [ 'v22.15.0' , { "chrome": "127.0.6533.88", "firefox": "latest" } ]
+// https://packages.debian.org/bookworm/chromium (133.0.6943.53-1~deb12u1)
+// https://packages.debian.org/bookworm/firefox-esr (128.7.0esr-1~deb12u1)
 
 module.exports = {
   RES_CORE_DEB12,