Trixie

.github/workflows/base-image.yaml

@@ -3,7 +3,7 @@ name: Update base image
 on:
   push:
     branches:
-      - main
+      - trixie
     paths:
       - image/Dockerfile-base
       - .github/workflows/base-image.yaml
@@ -41,13 +41,13 @@ jobs:
       - name: Base image
         id: build-and-push
         run: |
-          BASE_DIGEST=$(docker buildx imagetools inspect "debian:bookworm-slim" --format '{{json .}}' | jq -r '.manifest.digest')
+          BASE_DIGEST=$(docker buildx imagetools inspect "debian:trixie-slim" --format '{{json .}}' | jq -r '.manifest.digest')
 
-          sed -i "s|FROM debian:bookworm-slim|FROM debian:bookworm-slim@$BASE_DIGEST|" "image/Dockerfile-base"
+          sed -i "s|FROM debian:trixie-slim|FROM debian:trixie-slim@$BASE_DIGEST|" "image/Dockerfile-base"
 
           docker buildx build \
             --tag "danielflook/terraform-github-actions-base:$GITHUB_RUN_ID" \
-            --tag danielflook/terraform-github-actions-base:latest  \
+            --tag danielflook/terraform-github-actions-base:trixie  \
             --platform linux/amd64,linux/arm64 \
             --attest "type=provenance,mode=max,builder-id=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" \
             --annotation "index,manifest:org.opencontainers.image.created=$(date '+%Y-%m-%dT%H:%M:%S%z')" \
@@ -58,7 +58,7 @@ jobs:
             --annotation "index:org.opencontainers.image.ref.name=docker.io/danielflook/terraform-github-actions-base:$GITHUB_RUN_ID" \
             --annotation "index,manifest:builder-id=$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" \
             --annotation "index,manifest:ref.tag=$GITHUB_RUN_ID" \
-            --annotation "index,manifest:org.opencontainers.image.base.name=docker.io/debian:bookworm-slim" \
+            --annotation "index,manifest:org.opencontainers.image.base.name=docker.io/debian:trixie-slim" \
             --annotation "index,manifest:base.manifest.digest=$BASE_DIGEST" \
             --file image/Dockerfile-base \
             --push \

image/Dockerfile

@@ -1,11 +1,18 @@
 # hadolint ignore=DL3007
-FROM danielflook/terraform-github-actions-base:latest
+FROM danielflook/terraform-github-actions-base:trixie
 
 ARG TARGETARCH
 
 ARG FETCH_CHECKSUMS
 ARG VERSION=99.0.0
 
+RUN <<EOF
+ apt-get update
+ apt-get install --no-install-recommends -y \
+    python3-setuptools
+ rm -rf /var/lib/apt/lists/*
+EOF
+
 COPY src/ /tmp/src/
 COPY setup.py /tmp
 RUN sed -i "s|version='.*'|version=\'${VERSION}\'|" /tmp/setup.py \

image/Dockerfile-base

@@ -7,7 +7,7 @@ RUN git clone https://github.com/cloudposse/tfmask.git \
  && make \
  && make go/build
 
-FROM debian:bookworm-slim AS terraform-github-actions-base
+FROM debian:trixie-slim AS terraform-github-actions-base
 
 # Terraform environment variables
 ENV CHECKPOINT_DISABLE=true