debian 13 to do

[loosebazooka]

• update bazel deps (except rules_oci)
• update rules_oci
• bazel 8.X
• merged usr fs
  • only for debian13 (not 12)
• ensure no overwrites, all images should have a test that checks for overwrites, update any paths
• mtime -> 0 (we seem to use a variety of numbers all over the place to minimize diffs)
• update image diff action

[huakaibird]

when 13 will be released?

[loosebazooka]

I don't have a timeline, hopefully in the next few weeks.

[IanDavey]

Hello,

What is the timeline for release here? My employer is waiting on a production deployment.

Thanks.

[maxime-perocheau-hs]

@loosebazooka is there anything left outstanding for this? Happy to help if I can, would love to see Debian 13 images released!

[jayvdb]

Appears to be happening at #1850

[harryzcy]

Appears to be happening at #1850

No, it only adds Debian 13 to root-level bazel build. It does not address any of the TODOs listed in this issue.

[nappa85]

Sorry to bother, but any news on this? It's becoming annoying since most of build systems have already increased glibc version and builds won't work with debian 12

[loosebazooka]

I believe @thesayyn is working on it this week

[ndthayer]

@thesayyn , @loosebazooka : Is there an ETA you can share on the debian13 distroless base image being GA?

[loosebazooka]

okay we're buliding static, base, base-nossl debian13 images now -- disclaimer here: https://github.com/GoogleContainerTools/distroless/?tab=readme-ov-file#debian-13-preview

[kyle-leonhard]

@loosebazooka - Thanks for knocking this out! I gave gcr.io/distroless/cc-debian13 a shot. When executing the resulting image, I ran into errors like this: libzstd.so.1: cannot open shared object file: No such file or directory. I was able to apt install bothzlib1g and libzstd1, copy both libz.so.1 and libzstd.so.1 into the final image with cc-debian13 as the base and make things work. With gcr.io/distroless/cc-debian12, the image functioned without separately copying over those shared libraries.

I have no idea whether this is an expected change or not. But I thought I'd report it in case it was unintended! Thanks again

FROM rust:1.90.0AS build
RUN apt-get update && apt-get install -y --no-install-recommends zlib1g libzstd1

# Other stuff...

FROM gcr.io/distroless/cc-debian13
COPY --from=build /lib/*/libz.so.1 /lib/
COPY --from=build /lib/*/libzstd.so.1 /lib/

# Other stuff...