Skip to content

ci: install bullseye build dependencies from archive.debian.org - #40

Open
pedrojhfs wants to merge 1 commit into
webrtc-node:mainfrom
pedrojhfs:ci/debian-bullseye-archive
Open

pedrojhfs wants to merge 1 commit into
webrtc-node:mainfrom
pedrojhfs:ci/debian-bullseye-archive

Conversation

@pedrojhfs

Copy link
Copy Markdown

Summary

Debian 11 (bullseye) is end of life and deb.debian.org no longer serves its security pool, so build-containers/Dockerfile.debian stops building:

E: Failed to fetch http://deb.debian.org/debian-security/pool/updates/main/o/openssl/libssl-dev_1.1.1w-0%2bdeb11u8_amd64.deb  404  Not Found
E: Failed to fetch http://deb.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0%2bdeb11u8_amd64.deb  404  Not Found
E: Failed to fetch http://deb.debian.org/debian-security/pool/updates/main/c/ca-certificates/ca-certificates_20250419%7edeb12u1%7edeb11u1_all.deb  404  Not Found

That image backs the linux-x64-glibc release prebuild and the CI Package artifact job. The last CI run on main predates the archive move, so it has not surfaced yet, but the next PR touching build-containers/, lib/ or src/, and the next release, would fail.

This points the bullseye sources at archive.debian.org (main, updates, security and backports, over HTTPS). The image keeps the glibc 2.31 baseline, so the produced prebuild is unchanged.

Verification

  • npm run check
  • npm run native:check - not applicable; no native source change
  • npm run build - covered by the image build below
  • npm test - not applicable; no runtime or test change
  • npm run api:check - not applicable; no public API change
  • npm run types:check - not applicable; no type change
  • npm run e2e:chrome - not applicable; no browser interop path change
  • npm run wpt:selection:check - not applicable
  • npm run wpt:smoke - not applicable
  • npm run wpt:smoke:check - not applicable
  • npm run wpt:test / npm run wpt:check:strict - not applicable

Additionally:

WPT impact

None. wpt-manifest.json and docs/divergences.md are unchanged.

Browser interoperability

No Chrome E2E behavior or coverage changes.

Notes

No libdatachannel pin, WPT pin, native lifetime, callback-threading, permission, or publication impact. Release output is unchanged (same base image and glibc baseline); only the apt sources move to the archive.

🤖 Generated with Claude Code

Debian 11 is end of life and deb.debian.org no longer serves its security
pool, so building build-containers/Dockerfile.debian fails with 404s for
libssl-dev, libssl1.1 and ca-certificates. That image backs the Linux glibc
release prebuild and the CI package-artifact job.

Point the bullseye sources at archive.debian.org so the image keeps building
against glibc 2.31.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@pedrojhfs
pedrojhfs requested a review from a team as a code owner October 6, 2026 22:33
@pedrojhfs pedrojhfs mentioned this pull request Oct 6, 2026
6 of 11 tasks

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant