Skip to content

Harden apt-get runs on Dockerfiles with retries #1246

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jviotti merged 1 commit into from
Aug 25, 2026
+5 −5
Merged

Harden apt-get runs on Dockerfiles with retries #1246

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
FROM debian:trixie AS builder

RUN apt-get --yes update && apt-get install --yes --no-install-recommends \
RUN apt-get --yes -o Acquire::Retries=3 update && apt-get install --yes --no-install-recommends \
build-essential ca-certificates cmake ninja-build sassc esbuild shellcheck nodejs npm ccache \
&& apt-get clean && rm -rf /var/lib/apt/lists/*

Expand Down
2 changes: 1 addition & 1 deletion benchmark/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
FROM one
RUN apt-get --yes update && apt-get install --yes --no-install-recommends jq \
RUN apt-get --yes -o Acquire::Retries=3 update && apt-get install --yes --no-install-recommends jq \
&& apt-get clean && rm -rf /var/lib/apt/lists/*
COPY benchmark/index.sh /benchmark/index.sh
COPY benchmark/index-add-update-rebuild.sh /benchmark/index-add-update-rebuild.sh
Expand Down
6 changes: 3 additions & 3 deletions enterprise/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ FROM debian:trixie AS builder
# the checksums that release publishes, which is the integrity that signing
# the repository was there to provide
ARG NODE_VERSION=22.23.1
RUN apt-get --yes update && apt-get install --yes --no-install-recommends \
RUN apt-get --yes -o Acquire::Retries=3 update && apt-get install --yes --no-install-recommends \
build-essential ca-certificates cmake ninja-build sassc esbuild shellcheck curl ccache \
openssl libssl-dev openssl-provider-fips libcurl4-openssl-dev \
&& apt-get clean && rm -rf /var/lib/apt/lists/* \
Expand Down Expand Up @@ -104,7 +104,7 @@ RUN mkdir -p /usr/share/sourcemeta/one \

FROM debian:trixie-slim

RUN apt-get --yes update && apt-get install --yes --no-install-recommends \
RUN apt-get --yes -o Acquire::Retries=3 update && apt-get install --yes --no-install-recommends \
openssl-provider-fips libcurl4t64 ca-certificates \
&& apt-get clean && rm -rf /var/lib/apt/lists/*
COPY --from=builder /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf
Expand Down Expand Up @@ -211,7 +211,7 @@ RUN test -f /usr/lib/*/ossl-modules/fips.so
# sed because update-ca-certificates needs it, so images that extend this one
# can install custom certificate authorities
RUN cp /bin/mount /bin/umount /tmp/ \
&& apt-get --yes update \
&& apt-get --yes -o Acquire::Retries=3 update \
&& apt-get --yes purge --allow-remove-essential \
adduser \
e2fsprogs gzip hostname init-system-helpers \
Expand Down
Loading