commit 104cdf1e5d70b1313583fcf38adfb67187545216 parent 5490deb8e1095159ead160a527c4c81bebc9bc92 Author: Julien Cristau <jcristau@mozilla.com> Date: Tue, 14 Oct 2025 08:33:25 +0000 Bug 1993001 - allow package downgrade to the ubuntu snapshot version. r=glandium We install apt-transport-https and ca-certificates from the non-snapshotted ubuntu archive, so can end up pulling newer packages than our snapshot, which can cause incompatibilities for downstream images. So downgrade them back to the snapshot version. Differential Revision: https://phabricator.services.mozilla.com/D267958 Diffstat:
| M | taskcluster/docker/debian-raw/Dockerfile | | | 12 | ++++++++++-- |
1 file changed, 10 insertions(+), 2 deletions(-)
diff --git a/taskcluster/docker/debian-raw/Dockerfile b/taskcluster/docker/debian-raw/Dockerfile @@ -71,5 +71,13 @@ RUN apt-get update && \ apt-get install \ apt-transport-https \ ca-certificates && \ - if [ -n "$SNAPSHOT" -a -f /etc/apt/sources.list.d/ubuntu.sources ]; then echo "APT::Snapshot \"$SNAPSHOT\";" > /etc/apt/apt.conf.d/99snapshot && apt-get update; fi && \ - apt-get dist-upgrade + if [ -n "$SNAPSHOT" -a -f /etc/apt/sources.list.d/ubuntu.sources ]; then \ + echo "APT::Snapshot \"$SNAPSHOT\";" > /etc/apt/apt.conf.d/99snapshot && \ + ( echo 'Package: *'; \ + echo 'Pin: origin "snapshot.ubuntu.com"'; \ + echo 'Pin-Priority: 1001'; \ + ) > /etc/apt/preferences.d/90snapshot && \ + downgrades=--allow-downgrades && \ + apt-get update; fi && \ + apt-get dist-upgrade ${downgrades} && \ + rm -f /etc/apt/preferences.d/90snapshot