fix(docker): use HTTPS Debian package mirrors

2026-08-29 21:10:00 +03:00
parent 55209a9bbc
commit c2556ec236
2 changed files with 16 additions and 4 deletions
@@ -53,8 +53,14 @@ RUN --mount=type=cache,id=crank-mcp-cargo-registry,target=/usr/local/cargo/regis

 FROM debian:bookworm-slim

-RUN apt-get update \
-    && apt-get install -y --no-install-recommends ca-certificates curl \
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
+
+RUN test -s /etc/ssl/certs/ca-certificates.crt \
+    && sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \
+    && grep -q '^URIs: https://deb.debian.org/' /etc/apt/sources.list.d/debian.sources \
+    && ! grep -Eq '^[[:space:]]*URIs:[[:space:]]+http://' /etc/apt/sources.list.d/debian.sources \
+    && apt-get -o Acquire::Retries=3 update \
+    && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl \
    && rm -rf /var/lib/apt/lists/*

 WORKDIR /app