GoogleContainerTools
Support for Debian13
Debian 13 is just around the corner. Any plans to support it? Do you welcome/need community contribution on this?
Hello, we already have someone provisioned for this, but would always like extra hands to review/test as we figure out the new deb13 builds.
Hopefully merged-usr is finally supported as discussed in https://github.com/GoogleContainerTools/distroless/issues/1393
Hopefully merged-usr is finally supported as discussed in #1393
Yeah that's the goal
Hello,
Debian 13 is out, so wanted to ping here just in case:
https://9to5linux.com/debian-13-trixie-is-now-available-for-download-heres-whats-new
If required, we can run our product CI on top of those images and report issue if we find some.
We mainly use java21, base-nossl and cc.
This start to become a blocking issue as many language images are using Debian 13, which use glibc 2.41. But Debian 12 use glibc 2.36.
Hopefully merged-usr is finally supported as discussed in #1393
Yeah that's the goal
The functionality is added to rules_distroless already, but not released yet. Can any maintainer cut a new release for it?
Hopefully merged-usr is finally supported as discussed in #1393
Yeah that's the goal
The functionality is added to rules_distroless already, but not released yet. Can any maintainer cut a new release for it?
There is a ticket open but that project seems slow nowadays.
Seems sad after months of soft and hard freeze leaving ample time to kink out all build problems that debian13 still isn't supported... why not just publish beta images in advance so the community can help solve problems faster? 🤔
Perhaps the documentation at https://github.com/GoogleContainerTools/distroless/blob/main/README.md should be updated appropriately to reflect the changes in the relevant PR?
@linghengqian that PR doesn't do any builds, I'm working on that now. I need people to understand that builds will be in preview to determine if there are any quirks that we aren't aware of, particularly when using the merged usr fs.
https://github.com/GoogleContainerTools/distroless/pull/1850 should make these availalbe, be aware that images may change until we mark them stable.
#1850 should make these availalbe, be aware that images may change until we mark them stable.
Thanks and I added a comment in the PR about mergeduser.
I think it's more than just flipping a switch for merged-usr. We have to add in the symlinks at the base level and ensure no one overwrites the symlinks at a higher level. (which isn't hard but needs to be done)
There are no trixie images yet.
curl -s https://gcr.io/v2/distroless/static-debian13/tags/list
Edit: The first images / tags have been pushed, anyone can try if compression libs or something else is missing.
@reneleonhardt I'm getting Details: libzstd.so.1: cannot open shared object file: No such file or directory on nodejs24-debian13. Is this expected?
Yeah whatever your using is depending on that Facebook compression library. Is this just moving from deb 12 to 13?
Yes, the only change was nodejs24-debian12 -> nodejs24-debian13.
Was libz statically linked in v12? Thus wasn't explicitly needed?
This start to become a blocking issue as many language images are using Debian 13, which use glibc 2.41.
If this is due to compiling artifacts on those images and copying them over to distroless, then perhaps bringing in zig cc/zig c++ would resolve that glibc concern as it can target lower versions of glibc than the build image provides.
If copying over something that was already built from that image (such as a runtime), then the image itself would need to build with a Zig toolchain too?
Last I recall those language images build their runtimes from source so that should be quite possible for them to adopt (but then again Zig still has some issues when it comes to link args support, so depending on context that may not work out and may not be obvious to the maintainers initially).
Are there any plans how long debian12 will still be supported for java, when debian13 images are stable? 3 months as mentioned in SUPPORT_POLICY.md?
Can we get support for java-base-debian13? I see there's an open pr here https://github.com/GoogleContainerTools/distroless/pull/1899
Can we get support for java-base-debian13? I see there's an open pr here #1899
oh yeah I'll try to get that done in the next few days
Are there any plans how long debian12 will still be supported for java, when debian13 images are stable? 3 months as mentioned in SUPPORT_POLICY.md?
The support might extend a bit longer for java/python as we work things out.
so I think we have all images published except python. There's some more work to do there to figure that bit out, but I think we're good to go. I haven't had any issue reports with debian13 that have not been solved. I'll go ahead and mark these ready for use (with python tbd).