From 0f0e342e15f0803cd2bb26357fcdadb1b3bb813b Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Mon, 16 Mar 2026 19:17:03 +0100 Subject: [PATCH 1/7] ci: also build armv7 platform Signed-off-by: Lukas Mertens --- .github/workflows/deploy-docker-images.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/deploy-docker-images.yml b/.github/workflows/deploy-docker-images.yml index 54ff2ae..d585539 100644 --- a/.github/workflows/deploy-docker-images.yml +++ b/.github/workflows/deploy-docker-images.yml @@ -23,6 +23,7 @@ env: PLATFORMS: | linux/amd64 linux/arm64 + linux/arm/v7 PATH_TO_DEPLOY_SINGLE_DOCKER_IMAGE_WORKFLOW: .github/workflows/deploy-single-docker-image.yml PATH_TO_DEPLOY_DOCKER_IMAGES_WORKFLOW: .github/workflows/deploy-docker-images.yml From d8778593005cd6be628382fa6d6937572e1144f6 Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 18:38:12 +0200 Subject: [PATCH 2/7] ci: define concurrency group to prevent multiple commits from being pushed at the same time Signed-off-by: Lukas Mertens --- .github/workflows/deploy-docker-images.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/deploy-docker-images.yml b/.github/workflows/deploy-docker-images.yml index d585539..35bc78b 100644 --- a/.github/workflows/deploy-docker-images.yml +++ b/.github/workflows/deploy-docker-images.yml @@ -17,6 +17,10 @@ on: tags: - 'v*' +concurrency: + group: deploy-docker-images-${{ github.ref }} + cancel-in-progress: false + env: REGISTRY: ghcr.io DOCKER_DIRECTORY: docker/images From 7f1dd549e6cfb166a8cbf397495a39a8afa91f3d Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 18:44:50 +0200 Subject: [PATCH 3/7] fix(run-env-base): bump openjdk-17-jre and libssl3 to currently available versions Signed-off-by: Lukas Mertens --- docker/images/run-env-base/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docker/images/run-env-base/Dockerfile b/docker/images/run-env-base/Dockerfile index 9627ec6..cfd5526 100644 --- a/docker/images/run-env-base/Dockerfile +++ b/docker/images/run-env-base/Dockerfile @@ -2,7 +2,7 @@ FROM debian:12-slim # renovate: datasource=repology depName=debian_12/openjdk-17 versioning=loose -ENV OPENJDK_17_JRE_VERSION=17.0.18+8-1~deb12u1 +ENV OPENJDK_17_JRE_VERSION=17.0.19+10-1~deb12u2 # renovate: datasource=repology depName=debian_12/nodejs versioning=loose ENV NODEJS_VERSION=18.20.4+dfsg-1~deb12u1 # renovate: datasource=repology depName=debian_12/npm versioning=loose @@ -20,7 +20,7 @@ ENV LIBBOOST_CHRONO1_74_0_VERSION=1.74.0+ds1-21 # renovate: datasource=repology depName=debian_12/boost1.74 versioning=loose ENV LIBBOOST_SYSTEM1_74_0_VERSION=1.74.0+ds1-21 # renovate: datasource=repology depName=debian_12/openssl versioning=loose -ENV LIBSSL3_VERSION=3.0.18-1~deb12u2 +ENV LIBSSL3_VERSION=3.0.19-1~deb12u2 # renovate: datasource=repology depName=debian_12/curl versioning=loose ENV LIBCURL4_VERSION=7.88.1-10+deb12u14 # renovate: datasource=repology depName=debian_12/libcap2 versioning=loose From 919c94b146940162e48ca073248140fbaa268c58 Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 18:49:52 +0200 Subject: [PATCH 4/7] fix(run-env-base): bump nodejs to currently available version 18.20.4+dfsg-1~deb12u1 was replaced by a security update and is no longer available in the Debian 12 repos. Signed-off-by: Lukas Mertens --- docker/images/run-env-base/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/images/run-env-base/Dockerfile b/docker/images/run-env-base/Dockerfile index cfd5526..80bd9e0 100644 --- a/docker/images/run-env-base/Dockerfile +++ b/docker/images/run-env-base/Dockerfile @@ -4,7 +4,7 @@ FROM debian:12-slim # renovate: datasource=repology depName=debian_12/openjdk-17 versioning=loose ENV OPENJDK_17_JRE_VERSION=17.0.19+10-1~deb12u2 # renovate: datasource=repology depName=debian_12/nodejs versioning=loose -ENV NODEJS_VERSION=18.20.4+dfsg-1~deb12u1 +ENV NODEJS_VERSION=18.20.4+dfsg-1~deb12u2 # renovate: datasource=repology depName=debian_12/npm versioning=loose ENV NPM_VERSION=9.2.0~ds1-1 # renovate: datasource=repology depName=debian_12/python3-pip versioning=loose From 5fe353c931e27ddd1bd44f9570c3c20e11e9db7f Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 19:24:43 +0200 Subject: [PATCH 5/7] fix: make base image registry configurable to support forks Before everything was hardcoded to ghcr.io/everest/everest-ci as the base registry, causing builds to fail on forks where run-env-base and build-env-base are pushed to the fork's own registry. BASE_IMAGE_REGISTRY is now passed as a build arg derived from github.repository_owner, so forks automatically pull their own freshly-built base images. Co-Authored-By: Claude Sonnet 4.6 Signed-off-by: Lukas Mertens --- .github/workflows/deploy-docker-images.yml | 4 +++- docker/images/build-env-base/Dockerfile | 3 ++- docker/images/build-kit-base/Dockerfile | 3 ++- docker/images/dev-env-base/Dockerfile | 3 ++- 4 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.github/workflows/deploy-docker-images.yml b/.github/workflows/deploy-docker-images.yml index 35bc78b..0cd3746 100644 --- a/.github/workflows/deploy-docker-images.yml +++ b/.github/workflows/deploy-docker-images.yml @@ -102,7 +102,7 @@ jobs: ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }} build_args: | BASE_IMAGE_TAG=${{ needs.run-env-base.outputs.one_image_tag_short }} - + BASE_IMAGE_REGISTRY=${{ needs.env-setup.outputs.docker_registry }}/${{ github.repository_owner }}/${{ needs.env-setup.outputs.repository_name }} dev-env-base: needs: - env-setup @@ -129,6 +129,7 @@ jobs: ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }} build_args: | BASE_IMAGE_TAG=${{ needs.build-env-base.outputs.one_image_tag_short }} + BASE_IMAGE_REGISTRY=${{ needs.env-setup.outputs.docker_registry }}/${{ github.repository_owner }}/${{ needs.env-setup.outputs.repository_name }} build-kit-base: needs: - env-setup @@ -155,6 +156,7 @@ jobs: ${{ needs.env-setup.outputs.path_to_deploy_docker_images_workflow }} build_args: | BASE_IMAGE_TAG=${{ needs.build-env-base.outputs.one_image_tag_short }} + BASE_IMAGE_REGISTRY=${{ needs.env-setup.outputs.docker_registry }}/${{ github.repository_owner }}/${{ needs.env-setup.outputs.repository_name }} # Include deprecated images for backwards compatibility deprecated-everest-clang-format: if: ${{ needs.env-setup.outputs.build_deprecated_images == 'true' }} diff --git a/docker/images/build-env-base/Dockerfile b/docker/images/build-env-base/Dockerfile index 3f5e374..8ae3d6f 100644 --- a/docker/images/build-env-base/Dockerfile +++ b/docker/images/build-env-base/Dockerfile @@ -1,6 +1,7 @@ # syntax=docker/dockerfile:1 ARG BASE_IMAGE_TAG=latest -FROM ghcr.io/everest/everest-ci/run-env-base:${BASE_IMAGE_TAG} +ARG BASE_IMAGE_REGISTRY=ghcr.io/everest/everest-ci +FROM ${BASE_IMAGE_REGISTRY}/run-env-base:${BASE_IMAGE_TAG} # renovate: datasource=repology depName=debian_12/git versioning=loose ENV GIT_VERSION=1:2.39.5-0+deb12u3 diff --git a/docker/images/build-kit-base/Dockerfile b/docker/images/build-kit-base/Dockerfile index 1751328..1e1bbe7 100644 --- a/docker/images/build-kit-base/Dockerfile +++ b/docker/images/build-kit-base/Dockerfile @@ -1,6 +1,7 @@ # syntax=docker/dockerfile:1 ARG BASE_IMAGE_TAG=latest -FROM ghcr.io/everest/everest-ci/build-env-base:${BASE_IMAGE_TAG} +ARG BASE_IMAGE_REGISTRY=ghcr.io/everest/everest-ci +FROM ${BASE_IMAGE_REGISTRY}/build-env-base:${BASE_IMAGE_TAG} ENV WORKSPACE_PATH=/workspace ARG EXT_MOUNT=/ext diff --git a/docker/images/dev-env-base/Dockerfile b/docker/images/dev-env-base/Dockerfile index 60c5a89..7a32791 100644 --- a/docker/images/dev-env-base/Dockerfile +++ b/docker/images/dev-env-base/Dockerfile @@ -1,6 +1,7 @@ # syntax=docker/dockerfile:1 ARG BASE_IMAGE_TAG=latest -FROM ghcr.io/everest/everest-ci/build-env-base:${BASE_IMAGE_TAG} +ARG BASE_IMAGE_REGISTRY=ghcr.io/everest/everest-ci +FROM ${BASE_IMAGE_REGISTRY}/build-env-base:${BASE_IMAGE_TAG} ARG USERNAME=docker ARG USER_UID=1000 From 16339071be777b9bd60427df66bd95dbda7afbf8 Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 19:28:54 +0200 Subject: [PATCH 6/7] fix(build-env-base): bump libssl-dev and libnode-dev to currently available versions Signed-off-by: Lukas Mertens --- docker/images/build-env-base/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docker/images/build-env-base/Dockerfile b/docker/images/build-env-base/Dockerfile index 8ae3d6f..c6adfd8 100644 --- a/docker/images/build-env-base/Dockerfile +++ b/docker/images/build-env-base/Dockerfile @@ -68,9 +68,9 @@ ENV LIBBOOST_ALL_DEV_VERSION=1.74.0.3 # renovate: datasource=repology depName=debian_12/libsqlite3-dev versioning=loose ENV LIBSQLITE3_DEV_VERSION=3.40.1-2+deb12u2 # renovate: datasource=repology depName=debian_12/openssl versioning=loose -ENV LIBSSL_DEV_VERSION=3.0.18-1~deb12u2 +ENV LIBSSL_DEV_VERSION=3.0.19-1~deb12u2 # renovate: datasource=repology depName=debian_12/nodejs versioning=loose -ENV LIBNODE_DEV_VERSION=18.20.4+dfsg-1~deb12u1 +ENV LIBNODE_DEV_VERSION=18.20.4+dfsg-1~deb12u2 # renovate: datasource=repology depName=debian_12/pkg-config versioning=loose ENV PKG_CONFIG_VERSION=1.8.1-1 # renovate: datasource=repology depName=debian_12/libpcap-dev versioning=loose From 4273f6eaca896fd319d8455d99f0114d2241a43d Mon Sep 17 00:00:00 2001 From: Lukas Mertens Date: Fri, 15 May 2026 20:58:22 +0200 Subject: [PATCH 7/7] fix(dev-env-base): bump Docker packages to currently available versions The previously pinned versions of docker-ce, docker-ce-cli, containerd.io, docker-buildx-plugin and docker-compose-plugin were removed from download.docker.com and are no longer available. Signed-off-by: Lukas Mertens --- docker/images/dev-env-base/Dockerfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/docker/images/dev-env-base/Dockerfile b/docker/images/dev-env-base/Dockerfile index 7a32791..1b83f40 100644 --- a/docker/images/dev-env-base/Dockerfile +++ b/docker/images/dev-env-base/Dockerfile @@ -68,11 +68,11 @@ ENV CA_CERTIFICATES_VERSION=20230311+deb12u1 ENV CURL_VERSION=7.88.1-10+deb12u14 # Not managed by renovate, because no available datasource -ENV DOCKER_CE_VERSION=5:27.0.3-1~debian.12~bookworm -ENV DOCKER_CE_CLI_VERSION=5:27.1.1-1~debian.12~bookworm -ENV CONTAINERD_IO_VERSION=1.7.19-1 -ENV DOCKER_BUILDX_PLUGIN_VERSION=0.16.1-1~debian.12~bookworm -ENV DOCKER_COMPOSE_PLUGIN_VERSION=2.29.1-1~debian.12~bookworm +ENV DOCKER_CE_VERSION=5:29.5.0-1~debian.12~bookworm +ENV DOCKER_CE_CLI_VERSION=5:29.5.0-1~debian.12~bookworm +ENV CONTAINERD_IO_VERSION=2.2.3-1~debian.12~bookworm +ENV DOCKER_BUILDX_PLUGIN_VERSION=0.34.0-1~debian.12~bookworm +ENV DOCKER_COMPOSE_PLUGIN_VERSION=5.1.3-1~debian.12~bookworm # Development Tools - Docker RUN apt update \