Deploy docker images on bookworm

docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM debian:bullseye AS scz-base
+FROM debian:bookworm AS scz-base
 LABEL org.opencontainers.image.authors="SRAM team <[email protected]>"
 
 ARG DEBIAN_FRONTEND=noninteractive
@@ -25,7 +25,7 @@ RUN apt-get update -y                && \
         locales-all                     \
         logrotate                       \
         net-tools                       \
-        netcat                          \
+        netcat-openbsd                  \
         nullmailer                      \
         openssh-server                  \
         parted                          \
@@ -39,18 +39,22 @@ RUN apt-get update -y                && \
         vim                             \
         wget                            \
         xz-utils                     && \
-    apt-get purge -y isc-dhcp-client && \
+    apt-get purge -y                    \
+        isc-dhcp-client                 \
+        systemd-timesyncd            && \
     apt-get clean -y                 && \
     apt-get autoremove --purge -y    && \
     rm -rf /var/lib/apt/lists/*      && \
     rm -rf /tmp/* /var/tmp/*
 
-RUN update-locale
-
 RUN systemctl enable ssh.service                 && \
-    systemctl disable systemd-timesyncd.service  && \
     echo "exit 0" > /usr/sbin/policy-rc.d
 
+RUN systemctl disable getty@  && \
+    systemctl disable getty.target  && \
+    rm /lib/systemd/system/multi-user.target.wants/getty.target  && \
+    rm /lib/systemd/system/getty.target.wants/getty-static.service
+
 RUN useradd --create-home --shell /bin/bash --groups adm ansible        && \
     install -d -o ansible -m 0700 /home/ansible/.ssh  && \
     echo -n 'ansible:ansible' | chpasswd

provision.yml

@@ -130,8 +130,8 @@
   tasks:
     - { import_tasks: "tasks/versions.yml", tags: ['common'] }
   roles:
-    - { role: pyff-metadata, tags: ['meta','pyff-metadata']}
-    - { role: metadata,      tags: ['meta','metadata']     }
+    # - { role: pyff-metadata, tags: ['meta','pyff-metadata']}
+    # - { role: metadata,      tags: ['meta','metadata']     }
 
 - name: "client"
   hosts: client

roles/apt/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-debian_dist: 'bullseye'
+debian_dist: 'bookworm'
 
 deb_host: >-
   {% if is_aws | default(false) -%}

roles/apt/tasks/main.yml

@@ -52,7 +52,7 @@
       - "lsof"
       - "needrestart"
       - "net-tools"
-      - "netcat"
+      - "netcat-openbsd"
       - "parted"
       - "python3"
       - "python3-apt"

roles/db_server/tasks/main.yml

@@ -107,12 +107,6 @@
       =mCOI
       -----END PGP PUBLIC KEY BLOCK-----
 
-- name: Install mariadb repo
-  apt_repository:
-    filename: "mariadb"
-    repo: "deb https://mirror.rackspace.com/mariadb/repo/10.5/debian bullseye main"
-    update_cache: true
-
 - name: Create mariadb.service.d directory
   file:
     path: /etc/systemd/system/mariadb.service.d

roles/lb_haproxy/tasks/main.yml

@@ -139,7 +139,6 @@
     src: "{{item}}"
     dest: "/etc/systemd/system/haproxy.service.d/"
   with_items:
-    - "haproxy-log-bindmount.conf"
     - "haproxy-state.conf"
   notify:
     - "systemd daemon-reload"

roles/simplesamlphp/handlers/main.yml

@@ -2,7 +2,7 @@
 - name: "restart php-fpm"
   listen: "restart php-fpm"
   systemd:
-    name: "php7.4-fpm.service"
+    name: "php8.2-fpm.service"
     state: "restarted"
     daemon_reload: true
     enabled: true

roles/simplesamlphp/tasks/main.yml

@@ -113,7 +113,7 @@
 - name: Install fpm pool config
   template:
     src: "fpm-pool.j2"
-    dest: "/etc/php/7.4/fpm/pool.d/{{simplesaml_name}}.conf"
+    dest: "/etc/php/8.2/fpm/pool.d/{{simplesaml_name}}.conf"
   notify: "restart php-fpm"
 
 - name: Find php version