Update docker image bases (#161)

Author: jssblck

.github/workflows/main.yml

@@ -45,7 +45,7 @@ jobs:
       AWS_ENDPOINT_URL_S3: http://localhost:9000
     services:
       postgres:
-        image: postgres:17.4-bookworm
+        image: postgres:18.1-trixie
         env:
           POSTGRES_USER: attune
           POSTGRES_PASSWORD: attune

.github/workflows/pr.yml

@@ -41,7 +41,7 @@ jobs:
       AWS_ENDPOINT_URL_S3: http://localhost:9000
     services:
       postgres:
-        image: postgres:17.4-bookworm
+        image: postgres:18.1-trixie
         env:
           POSTGRES_USER: attune
           POSTGRES_PASSWORD: attune

.github/workflows/tag.yml

@@ -125,7 +125,7 @@ jobs:
       AWS_ENDPOINT_URL_S3: http://localhost:9000
     services:
       postgres:
-        image: postgres:17.4-bookworm
+        image: postgres:18.1-trixie
         env:
           POSTGRES_USER: attune
           POSTGRES_PASSWORD: attune

docker-compose.yml

@@ -24,15 +24,15 @@ services:
     networks:
       - dev
   postgres:
-    image: postgres:17.4-bookworm
+    image: postgres:18.1-trixie
     environment:
       - POSTGRES_USER=attune
       - POSTGRES_PASSWORD=attune
       - POSTGRES_DB=attune
     ports:
       - "5432:5432"
     volumes:
-      - ./postgres-data:/var/lib/postgresql/data
+      - ./postgres-data:/var/lib/postgresql
     healthcheck:
       test: ["CMD", "pg_isready", "-U", "attune"]
       interval: 3s

docker/attune-ee/Dockerfile

@@ -1,4 +1,4 @@
-FROM rust:1.89.0-bookworm AS build
+FROM rust:1.89.0-trixie AS build
 
 RUN apt-get update && apt-get install -y pkg-config libgpg-error-dev libgpgme-dev
 
@@ -29,7 +29,7 @@ COPY ./scripts ./scripts
 COPY ./docker/migrate/prisma/migrations ./docker/migrate/prisma/migrations
 RUN cargo build --release
 
-FROM debian:bookworm-slim AS runtime
+FROM debian:trixie-slim AS runtime
 
 RUN apt-get update
 RUN apt-get install -y --no-install-recommends libssl3 ca-certificates libgpg-error0 libgpgme11 curl && rm -rf /var/lib/apt/lists/*

docker/attune/Dockerfile

@@ -1,4 +1,4 @@
-FROM rust:1.89.0-bookworm AS build
+FROM rust:1.89.0-trixie AS build
 
 RUN apt-get update && apt-get install -y pkg-config libgpg-error-dev libgpgme-dev
 
@@ -16,7 +16,7 @@ COPY ./packages ./packages
 COPY ./scripts/fixtures ./scripts/fixtures
 RUN cargo build --release --bin attune-server
 
-FROM debian:bookworm-slim AS runtime
+FROM debian:trixie-slim AS runtime
 
 RUN apt-get update
 RUN apt-get install -y --no-install-recommends libssl3 ca-certificates libgpg-error0 libgpgme11 curl && rm -rf /var/lib/apt/lists/*

docker/migrate/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24-bookworm
+FROM node:24-trixie
 
 WORKDIR /app
 COPY ./package.json ./package-lock.json ./

docker/minio/Dockerfile

@@ -1,5 +1,24 @@
-FROM minio/minio:RELEASE.2025-04-08T15-41-24Z-cpuv1
+# Building MinIO from source because they no longer provide a prebuilt image:
+# https://github.com/minio/minio/issues/21647
 
-COPY ./entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
-ENTRYPOINT [ "/bin/bash", "/entrypoint.sh" ]
+# Update this when building new images.
+ARG MINIO_RELEASE=RELEASE.2025-10-15T17-29-55Z
+
+FROM golang:1.24-alpine AS minio-builder
+ARG MINIO_RELEASE
+RUN apk add --no-cache git
+RUN git clone --depth 1 --branch ${MINIO_RELEASE} https://github.com/minio/minio.git /src
+WORKDIR /src
+RUN go build -o /usr/local/bin/minio .
+
+FROM alpine:3.21
+COPY --from=minio-builder /usr/local/bin/minio /usr/local/bin/minio
+
+# We can use the prebuilt `mc` binary from MinIO's release page, they still
+# publish that.
+ARG TARGETARCH
+RUN wget -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/mc -O /usr/local/bin/mc && \
+    chmod +x /usr/local/bin/mc
+COPY --chmod=755 ./entrypoint.sh /entrypoint.sh
+
+ENTRYPOINT [ "/bin/sh", "/entrypoint.sh" ]

docker/minio/entrypoint.sh

@@ -1,15 +1,32 @@
-#!/bin/bash
+#!/bin/sh
 
 # This creates a default bucket for the Minio instance, which is required by
 # Attune.
 #
 # See: https://github.com/minio/minio/issues/4769
-set -euxo pipefail
+set -eux
 minio server /data --console-address ":9001" &
 MINIO_SERVER_PID=$!
-sleep 1
+
+# Wait for minio to be ready (CI can be slow)
+MINIO_READY=false
+for i in 1 2 3 4 5; do
+    if mc alias set local http://127.0.0.1:9000 attuneminio attuneminio 2>/dev/null; then
+        MINIO_READY=true
+        break
+    fi
+    echo "Waiting for minio to start (attempt $i)..."
+    sleep $i
+done
+if [ "$MINIO_READY" = "false" ]; then
+    echo "ERROR: MinIO failed to start after 5 attempts"
+    exit 1
+fi
+
+# 'local' alias was set in the loop above. Now set 'attune' alias.
 mc alias set attune http://127.0.0.1:9000 attuneminio attuneminio
 mc mb --ignore-existing attune/attune-dev-0
+
 # This needs to be readable for the E2E test to install packages, and writeable
 # for integration tests to upload objects.
 mc anonymous set public attune/attune-dev-0

docker/testinstall/Dockerfile

@@ -1,3 +1,3 @@
-FROM debian:bookworm-slim
+FROM debian:trixie-slim
 
 RUN apt-get update && apt-get install -y apt-transport-https ca-certificates