Skip to content

fix(docker): base images on ruby:3.4-slim-trixie #271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chrapkowski-sg merged 1 commit into from
Oct 22, 2026
Merged

fix(docker): base images on ruby:3.4-slim-trixie #271

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 18 additions & 15 deletions Dockerfile.base
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
FROM --platform=linux/amd64 \
ruby:2.7.6-alpine3.16@sha256:b014cf3e792d7130daec772241a211c40be009fc7f00e2b728ffe26805649575
ruby:3.4-slim-trixie@sha256:a1e521f7710a59431695c0628de8ffdbbceec17065a217bd67b59343d4d17b22

# This is the base Docker image for scip-ruby with common dependencies

Expand All @@ -10,19 +10,18 @@ ARG SCIP_RUBY_VERSION
RUN test -n "${SCIP_RUBY_VERSION}" || \
(echo "ERROR: SCIP_RUBY_VERSION build arg is required" && exit 1)

# gcompat is a glibc-musl compat library (scip-ruby links in glibc)
# Other deps are to help build C extensions in gems.
RUN apk add --no-cache \
bash \
wget \
make \
libstdc++ \
gcc \
g++ \
automake \
autoconf \
gcompat \
git
# ca-certificates is listed so the build picks up trust store fixes from
# trixie-security (e.g. 20250419+deb13u1 distrusts the compromised eMudhra chains).
# The other deps are used by the autoindex script and to build C extensions in gems.
RUN apt-get update && \
apt-get install -y --no-install-recommends \
ca-certificates \
wget \
git \
build-essential \
automake \
autoconf && \
rm -rf /var/lib/apt/lists/*

# Use a release binary instead of building from source
# because release builds are very time-consuming.
Expand All @@ -31,9 +30,13 @@ RUN apk add --no-cache \
# The binary at this version is guaranteed to exist because this workflow runs either:
# 1. Manually with a specific tag that already has a release
# 2. After the Release workflow completes (which creates the release and uploads the binary)
#
# `scip-ruby --version` fails the build if the binary can't run on this base
# (e.g. it needs a newer glibc).
RUN wget https://github.com/sourcegraph/scip-ruby/releases/download/scip-ruby-v${SCIP_RUBY_VERSION}/scip-ruby-x86_64-linux \
-O /usr/bin/scip-ruby && \
chmod +x /usr/bin/scip-ruby
chmod +x /usr/bin/scip-ruby && \
scip-ruby --version

# Set working directory for sources
WORKDIR /sources
Loading