From c2556ec236b6b14306c6f2d8674c3c5ada8b704e Mon Sep 17 00:00:00 2001 From: bsodfather Date: Sat, 29 Aug 2026 21:10:00 +0300 Subject: [PATCH] fix(docker): use HTTPS Debian package mirrors --- apps/admin-api/Dockerfile | 10 ++++++++-- apps/mcp-server/Dockerfile | 10 ++++++++-- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/apps/admin-api/Dockerfile b/apps/admin-api/Dockerfile index 4f921c2..8ea8159 100644 --- a/apps/admin-api/Dockerfile +++ b/apps/admin-api/Dockerfile @@ -16,8 +16,14 @@ RUN --mount=type=cache,id=crank-admin-cargo-registry,target=/usr/local/cargo/reg FROM debian:bookworm-slim -RUN apt-get update \ - && apt-get install -y --no-install-recommends ca-certificates curl \ +COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt + +RUN test -s /etc/ssl/certs/ca-certificates.crt \ + && sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \ + && grep -q '^URIs: https://deb.debian.org/' /etc/apt/sources.list.d/debian.sources \ + && ! grep -Eq '^[[:space:]]*URIs:[[:space:]]+http://' /etc/apt/sources.list.d/debian.sources \ + && apt-get -o Acquire::Retries=3 update \ + && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl \ && rm -rf /var/lib/apt/lists/* WORKDIR /app diff --git a/apps/mcp-server/Dockerfile b/apps/mcp-server/Dockerfile index 6afdfc9..33e6850 100644 --- a/apps/mcp-server/Dockerfile +++ b/apps/mcp-server/Dockerfile @@ -53,8 +53,14 @@ RUN --mount=type=cache,id=crank-mcp-cargo-registry,target=/usr/local/cargo/regis FROM debian:bookworm-slim -RUN apt-get update \ - && apt-get install -y --no-install-recommends ca-certificates curl \ +COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt + +RUN test -s /etc/ssl/certs/ca-certificates.crt \ + && sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \ + && grep -q '^URIs: https://deb.debian.org/' /etc/apt/sources.list.d/debian.sources \ + && ! grep -Eq '^[[:space:]]*URIs:[[:space:]]+http://' /etc/apt/sources.list.d/debian.sources \ + && apt-get -o Acquire::Retries=3 update \ + && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl \ && rm -rf /var/lib/apt/lists/* WORKDIR /app