test

.gitattributes

@@ -0,0 +1 @@
+*.tar.bz2 !text !filter !merge !diff

.gitea/workflows/base-build.yml

@@ -4,158 +4,375 @@ on:
   push:
     branches:
       - main
-    paths-ignore:
-      - '**/CHANGES.md'
-      - '**/build-info.json'
+    paths:
+      - '.gitea/workflows/*.yml'
+      - 'base-image-script/*.sh'
+      - '!**/debian-*.tar.bz2'
+      - '!/sha256sums.txt'
+      - '!**/CHANGES.md'
+      - '!**/build-info.json'
   schedule:
-    - cron: '0 12 * * 0'  # Sundays at noon UTC
+    - cron: '0 12 * * 0'  # Sunday at noon UTC
 
 env:
   REPO_URL: ${{ secrets.REPO_URL }}
   GIT_USERNAME: ${{ secrets.GIT_USERNAME }}
   GIT_EMAIL: ${{ secrets.GIT_EMAIL }}
+  GIT_PASSWORD: ${{ secrets.GIT_PASSWORD }}
+  GIT_TOKEN: ${{ secrets.GIT_TOKEN }}
+  GIT_CREDENTIAL: ${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}
   DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
   DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+  VERSIONS: "bullseye bookworm trixie"
+  OUTPUT_DIR: ./output
 
 jobs:
-  build-rootfs-archives:
-    runs-on: docker-build
+  docker-prune:
+    name: Docker prune (${{ matrix.runner }})
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        runner:
+          - vm-docker-build2
+          - vm-docker-build2
+          - vm-docker-build2
+          - vm-docker-build2
+    steps:
+      - name: Prune unused Docker images
+        run: |
+          echo "[INFO] Pruning Docker images on ${{ matrix.runner }}..."
+          docker image prune -a -f || true
 
+  build-and-push-rootfs-archives:
+    name: Build RootFS Archives (${{ matrix.version }})
+    runs-on: vm-docker-build2
+    needs: docker-prune
+    strategy:
+      fail-fast: false
+      matrix:
+        version: [bullseye, bookworm, trixie]
     steps:
       - name: Checkout source
         uses: actions/checkout@v3
 
-      - name: Build all Debian rootfs versions sequentially
+      - name: Create output directory for version
+        run: mkdir -p ./output/${{ matrix.version }}
+
+      - name: Build rootfs Docker image
         run: |
-          versions=(buster bullseye bookworm docker-build)
+          VERSION=${{ matrix.version }}
+          docker build --build-arg VERSION="$VERSION" -t rootfs-$VERSION .
 
-          for version in "${versions[@]}"; do
-            echo "[INFO] Building Debian $version rootfs..."
-            docker build --build-arg VERSION=$version -t fithwum/debian-$version-base .
-
-            docker run --rm --privileged \
-              -v "$(pwd)":/output \
-              fithwum/debian-$version-base \
-              bash base-image-script/debian-${version}_pt1.sh
-          done
-
-      - name: List output archives
+      - name: Run rootfs bootstrap in Docker volume
         run: |
-          echo "[INFO] Looking for tarballs in workspace..."
-          find . -name '*.tar.bz2' -ls
+          VERSION=${{ matrix.version }}
+          OUTPUT_DIR=./output/$VERSION
+          VOLUME_NAME="rootfs_output_$VERSION"
 
-  push-archives-to-repo:
-    needs: build-rootfs-archives
-    runs-on: docker-build
+          # Create Docker volume
+          docker volume create "$VOLUME_NAME"
 
-    steps:
-      - name: Checkout source
-        uses: actions/checkout@v3
+          # Run bootstrap inside volume
+          docker run --rm --privileged \
+            -v "$VOLUME_NAME:/output" \
+            -e VERSION="$VERSION" \
+            rootfs-$VERSION \
+            bash -c "/scripts/bootstrap-rootfs.sh $VERSION /output"
+
+          # Extract tarball from Docker volume
+          CONTAINER_ID=$(docker create -v "$VOLUME_NAME:/output" debian:bookworm)
+          mkdir -p "$OUTPUT_DIR"
+          docker cp "$CONTAINER_ID:/output/debian-$VERSION.tar.bz2" "$OUTPUT_DIR/"
+          docker rm "$CONTAINER_ID"
+          docker volume rm "$VOLUME_NAME"
+
+          # Verify tarball exists
+          TAR="$OUTPUT_DIR/debian-$VERSION.tar.bz2"
+          if [[ ! -f "$TAR" ]]; then
+            echo "[ERROR] Rootfs tarball missing: $TAR"
+            ls -lh "$OUTPUT_DIR"
+            exit 1
+          else
+            echo "[OK] Created $TAR"
+          fi
 
       - name: Clone upload repo
-        run: git clone "${{ env.REPO_URL }}" upload-repo
-
-      - name: Clean old archives in upload-repo
-        run: rm -rf upload-repo/*/*.tar.bz2
-
-      - name: Copy new archives to upload-repo
         run: |
-          found=$(find . -name '*.tar.bz2')
-          if [ -z "$found" ]; then
-            echo "[WARNING] No .tar.bz2 archive found!"
+          GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+          git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+
+      - name: Copy new archive into upload repo
+        run: |
+          VERSION=${{ matrix.version }}
+          mkdir -p "upload-repo/$VERSION"
+          cp "./output/$VERSION/debian-$VERSION.tar.bz2" "upload-repo/$VERSION/"
+
+      - name: Update sha256sums (per-version)
+        run: |
+          cd upload-repo
+          VERSION=${{ matrix.version }}
+          TAR="../output/$VERSION/debian-$VERSION.tar.bz2"
+          SHA_FILE="$VERSION/sha256sums.txt"
+
+          mkdir -p "$VERSION"
+
+          if [[ ! -f "$TAR" ]]; then
+            echo "[ERROR] Tarball not found at $TAR"
             exit 1
           fi
 
-          for filepath in $found; do
-            version_dir=$(dirname "$filepath")
-            mkdir -p upload-repo/"$version_dir"
-            cp "$filepath" upload-repo/"$version_dir"/
-          done
+          # Calculate SHA256 and store in per-version file
+          sha256sum "$TAR" > "$SHA_FILE"
+          echo "[INFO] SHA256 for $VERSION stored in $SHA_FILE"
 
-      - name: Commit and push archives if changed
+      - name: Commit and push if changed (matrix-safe)
         id: commit_archives
         run: |
           cd upload-repo
-          git config --global user.name "${{ env.GIT_USERNAME }}"
-          git config --global user.email "${{ env.GIT_EMAIL }}"
+          git config user.name "${{ env.GIT_USERNAME }}"
+          git config user.email "${{ env.GIT_EMAIL }}"
 
-          if git status --porcelain | grep .; then
-            git add **/*.tar.bz2
-            git commit -m "Update base images on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
-            git push
-            echo "archives_changed=true" >> $GITHUB_OUTPUT
-          else
-            echo "[INFO] No changes to commit."
-            echo "archives_changed=false" >> $GITHUB_OUTPUT
+          VERSION=${{ matrix.version }}
+
+          # Create temporary branch for this version
+          TEMP_BRANCH="tmp-update-${VERSION}-$(date -u +%s)"
+          git checkout -b "$TEMP_BRANCH"
+
+          # Stage changes: tarball + version-specific SHA file
+          git add "$VERSION/debian-$VERSION.tar.bz2" "$VERSION/sha256sums.txt"
+
+          if git diff --cached --quiet; then
+            echo "[INFO] No changes to commit for $VERSION"
+            echo "archives_changed=false" >> $GITEA_OUTPUT
+            exit 0
           fi
 
+          git commit -m "Update base image and checksum for $VERSION on $(date -u +'%Y-%m-%dT%H:%M:%SZ') [skip ci]"
+
+          # Push temporary branch
+          git push origin "$TEMP_BRANCH"
+
+          # Merge temp branch into main safely
+          git checkout main
+          git fetch origin main
+          git merge --no-ff --no-edit "$TEMP_BRANCH"
+
+          # Push main
+          git push origin main
+
+          # Delete temporary branch on remote
+          git push origin --delete "$TEMP_BRANCH" || true
+
+          echo "archives_changed=true" >> $GITEA_OUTPUT
+
+  # build-and-push-docker-images:
+  #   needs: 
+      # - docker-prune
+      # - build-and-push-rootfs-archives
+  #   if: always()
+  #   # if: needs.build-and-push-rootfs-archives.outputs.archives_changed == 'true'
+  #   runs-on: vm-docker-build2
+  #   steps:
+  #     - name: Checkout source
+  #       uses: actions/checkout@v3
+
+  #     - name: Wait for archives to appear in upload repo
+  #       run: |
+  #         echo "[INFO] Waiting for archives to appear in upload-repo..."
+
+  #         mkdir -p temp-check
+  #         cd temp-check
+
+  #         # Retry loop for cloning the upload-repo
+  #         for i in {1..10}; do
+  #           echo "[INFO] Attempt $i: Cloning upload-repo..."
+  #           if git clone --depth=1 "https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/debian-base.git"; then
+  #             break
+  #           fi
+  #           echo "[WARN] Clone failed. Retrying in 10 seconds..."
+  #           sleep 10
+  #         done
+
+  #         if [ ! -d "debian-base" ]; then
+  #           echo "[ERROR] Failed to clone upload-repo after retries."
+  #           exit 1
+  #         fi
+
+  #         cd debian-base
+
+  #         # Wait for all versions to show up
+  #         missing_versions=()
+  #         for version in $VERSIONS; do
+  #           found=0
+  #           for i in {1..30}; do
+  #             if [[ -f "$version/debian-$version.tar.bz2" ]]; then
+  #               found=1
+  #               break
+  #             else
+  #               echo "[WAIT] $version not ready yet, sleeping 10s..."
+  #               sleep 10
+  #             fi
+  #           done
+
+  #           if [[ $found -eq 0 ]]; then
+  #             missing_versions+=("$version")
+  #           fi
+  #         done
+
+  #         if [[ ${#missing_versions[@]} -gt 0 ]]; then
+  #           echo "[ERROR] Missing archives for: ${missing_versions[*]}"
+  #           exit 1
+  #         fi
+
+  #     - name: Generate Dockerfiles per version (if missing)
+  #       run: |
+  #         for version in $VERSIONS; do
+  #           mkdir -p "$version"
+  #           DOCKERFILE_PATH="$version/Dockerfile"
+
+  #           if [[ -f "$DOCKERFILE_PATH" ]]; then
+  #             echo "[INFO] Skipping $DOCKERFILE_PATH (already exists)"
+  #             continue
+  #           fi
+
+  #           printf '%s\n' \
+  #             "FROM scratch" \
+  #             "LABEL maintainer=\"fithwum\"" \
+  #             "ADD debian-$version.tar.bz2 /" \
+  #             "CMD [\"/bin/bash\"]" > "$DOCKERFILE_PATH"
+
+  #           echo "[INFO] Created $DOCKERFILE_PATH"
+  #         done
+
+  #     - name: Set up Docker Buildx
+  #       uses: docker/setup-buildx-action@v3
+
+  #     - name: Log in to Gitea Registry
+  #       run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login gitea.fithwum.tech -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
+
+  #     - name: Build and push Docker images
+  #       run: |
+  #         IMAGE_REGISTRY=gitea.fithwum.tech
+  #         IMAGE_ORG=fithwum
+  #         IMAGE_REPO=debian-base
+
+  #         for TAG in $VERSIONS; do
+  #           FULL_IMAGE="${IMAGE_REGISTRY}/${IMAGE_ORG}/${IMAGE_REPO}:${TAG}"
+  #           echo "[INFO] Building and pushing $FULL_IMAGE"
+  #           docker buildx build --platform linux/amd64 --push -t "$FULL_IMAGE" "./$TAG"
+  #         done
+
   build-and-push-docker-images:
-    # needs: push-archives-to-repo
-    # if: needs.push-archives-to-repo.outputs.archives_changed == 'true'
-    runs-on: docker-build
+    name: Build & Push Docker Images (${{ matrix.version }})
+    needs:
+      - docker-prune
+      - build-and-push-rootfs-archives
+    if: ${{ needs.build-and-push-rootfs-archives.result == 'success' }}
+    runs-on: vm-docker-build2
+    strategy:
+      fail-fast: false
+      matrix:
+        version: [bullseye, bookworm, trixie]
 
     steps:
       - name: Checkout source
         uses: actions/checkout@v3
 
+      - name: Fetch rootfs tarball from upload repo
+        run: |
+          VERSION=${{ matrix.version }}
+          git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+          mkdir -p "./output/$VERSION"
+          if [[ ! -f "upload-repo/$VERSION/debian-$VERSION.tar.bz2" ]]; then
+            echo "[ERROR] Rootfs tarball not found in upload-repo for $VERSION"
+            exit 1
+          fi
+          cp "upload-repo/$VERSION/debian-$VERSION.tar.bz2" "./output/$VERSION/"
+
+      - name: Prepare Docker context
+        run: |
+          VERSION=${{ matrix.version }}
+          CONTEXT_DIR="$VERSION"
+          mkdir -p "$CONTEXT_DIR"
+          cp "./output/$VERSION/debian-$VERSION.tar.bz2" "$CONTEXT_DIR/"
+
+      - name: Generate Dockerfile
+        run: |
+          VERSION=${{ matrix.version }}
+          DOCKERFILE="$VERSION/Dockerfile"
+          if [[ ! -f "$DOCKERFILE" ]]; then
+            printf '%s\n' \
+              "FROM scratch" \
+              "LABEL maintainer=\"fithwum\"" \
+              "ADD debian-$VERSION.tar.bz2 /" \
+              "CMD [\"/bin/bash\"]" > "$DOCKERFILE"
+            echo "[INFO] Created Dockerfile for $VERSION"
+          else
+            echo "[INFO] Dockerfile exists for $VERSION"
+          fi
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to Gitea Registry
         run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login gitea.fithwum.tech -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
 
-      - name: Build and push Docker images
+      - name: Build & Push Docker Image
         run: |
+          VERSION=${{ matrix.version }}
           IMAGE_REGISTRY=gitea.fithwum.tech
           IMAGE_ORG=fithwum
           IMAGE_REPO=debian-base
+          FULL_IMAGE="$IMAGE_REGISTRY/$IMAGE_ORG/$IMAGE_REPO:$VERSION"
 
-          for TAG in buster bullseye bookworm docker-build; do
-            FULL_IMAGE="${IMAGE_REGISTRY}/${IMAGE_ORG}/${IMAGE_REPO}:${TAG}"
-            echo "[INFO] Building and pushing $FULL_IMAGE"
-            docker buildx build --platform linux/amd64 --push -t "$FULL_IMAGE" "./$TAG"
-          done
+          TAR="./output/$VERSION/debian-$VERSION.tar.bz2"
+          if [[ ! -f "$TAR" ]]; then
+            echo "[ERROR] Rootfs tarball missing: $TAR"
+            exit 1
+          fi
+
+          echo "[INFO] Building and pushing Docker image: $FULL_IMAGE"
+          docker buildx build --platform linux/amd64 --push -t "$FULL_IMAGE" "./$VERSION"
 
   generate-changelogs:
     needs: build-and-push-docker-images
-    runs-on: docker-build
-
+    runs-on: vm-docker-build2
     steps:
       - name: Checkout source
         uses: actions/checkout@v3
 
+      - name: Create temporary changelog workspace
+        run: mkdir changelogs
+
       - name: Clone upload repo
-        run: git clone https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/debian-base.git upload-repo
-
-      - name: Generate per-version changelogs
         run: |
-          cd upload-repo
-          for version in buster bullseye bookworm docker-build; do
-            echo "[INFO] Updating changelog for $version"
+          GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+          git clone --depth=3 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
 
-            changelog="$version/CHANGES.md"
+      - name: Generate changelogs from git log
+        run: |
+          for version in $VERSIONS; do
+            echo "[INFO] Generating changelog for $version"
+            changelog="changelogs/$version/CHANGES.md"
             mkdir -p "$(dirname "$changelog")"
-            touch "$changelog"
 
-            infofile="$version/build-info.json"
-            last_commit=""
-            if [ -f "$infofile" ]; then
-              last_commit=$(jq -r '.commit' "$infofile")
-            fi
+            echo -e "## $(date -u +'%Y-%m-%dT%H:%M:%SZ')\n" >> "$changelog"
+            git log -n 3 --pretty=format:"- %h %ad %s (%an)" --date=short >> "$changelog"
+          done
 
-            echo -e "\n## $(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "$changelog"
-            if [ -n "$last_commit" ]; then
-              git log "${last_commit}..HEAD" --pretty=format:"- %s (%an)" | head -n 10 >> "$changelog"
-            else
-              git log -n 10 --pretty=format:"- %s (%an)" >> "$changelog"
-            fi
+      - name: Copy generated changelogs into repo
+        run: |
+          for version in $VERSIONS; do
+            mkdir -p "upload-repo/$version"
+            cp "changelogs/$version/CHANGES.md" "upload-repo/$version/CHANGES.md"
           done
 
       - name: Commit and push changelogs if changed
         run: |
           cd upload-repo
-          git config user.name "${{ secrets.GIT_USERNAME }}"
-          git config user.email "${{ secrets.GIT_EMAIL }}"
+          git config user.name "${{ env.GIT_USERNAME }}"
+          git config user.email "${{ env.GIT_EMAIL }}"
 
           if git status --porcelain | grep .; then
             git add */CHANGES.md
@@ -166,88 +383,128 @@ jobs:
           fi
 
   generate-build-info:
-    needs: generate-changelogs
-    runs-on: docker-build
-
+    needs: build-and-push-docker-images
+    runs-on: vm-docker-build2
     steps:
-      - name: Checkout source
-        uses: actions/checkout@v3
+    - name: Checkout source
+      uses: actions/checkout@v3
 
-      - name: Clone upload repo
-        run: |
-          git clone "https://${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_TOKEN }}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+    - name: Prepare temporary build-info workspace
+      run: mkdir -p buildinfo
 
-      - name: Generate build-info.json per version
-        run: |
-          human_size() {
-            local b=$1
-            local d=''
-            local s=0
-            local S=(B KB MB GB TB)
-            while ((b >= 1024 && s < ${#S[@]}-1)); do
-              d=$((b % 1024))
-              b=$((b / 1024))
-              s=$((s + 1))
-            done
-            printf "%s%s\n" "$b" "${S[$s]}"
-          }
+    - name: Clone upload repo
+      run: |
+        GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+        git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
 
-          cd upload-repo
-          for version in buster bullseye bookworm docker-build; do
-            echo "[INFO] Generating build-info.json for $version"
-            mkdir -p "$version"
-            infofile="$version/build-info.json"
+    - name: Copy sha256sums.txt
+      run: |
+        if [[ -f upload-repo/sha256sums.txt ]]; then
+          cp upload-repo/sha256sums.txt buildinfo/
+        else
+          echo "[ERROR] sha256sums.txt missing in upload-repo!"
+          exit 1
+        fi
 
-            image="gitea.fithwum.tech/fithwum/debian-base:$version"
+    - name: Generate build-info.json files
+      run: |
+        human_size() {
+          local b=$1
+          local d=''
+          local s=0
+          local S=(B KB MB GB TB)
+          while ((b >= 1024 && s < ${#S[@]}-1)); do
+            d=$((b % 1024))
+            b=$((b / 1024))
+            s=$((s + 1))
+          done
+          printf "%s%s\n" "$b" "${S[$s]}"
+        }
 
+        cd buildinfo
+        for version in $VERSIONS; do
+          echo "[INFO] Generating build-info.json for $version"
+          mkdir -p "$version"
+          infofile="$version/build-info.json"
+
+          image="gitea.fithwum.tech/fithwum/debian-base:$version"
+          
+          # Pull image before inspecting to ensure metadata is available
+          if ! docker pull "$image"; then
+            echo "[WARN] Failed to pull $image — setting fields to 'unknown/0'"
+            digest="unknown"
+            size_bytes=0
+          else
             digest=$(docker inspect --format='{{if .RepoDigests}}{{index .RepoDigests 0}}{{else}}unknown{{end}}' "$image" 2>/dev/null || echo "unknown")
             size_bytes=$(docker image inspect "$image" --format='{{.Size}}' 2>/dev/null || echo "0")
-
             size_bytes=${size_bytes//[^0-9]/}
             if [[ -z "$size_bytes" ]]; then size_bytes=0; fi
+          fi
 
-            size_human=$(human_size "$size_bytes")
+          size_human=$(human_size "$size_bytes")
 
-            jq -n \
-              --arg version "$version" \
-              --arg commit "$(git rev-parse HEAD)" \
-              --arg build_time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
-              --arg image_tag "$image" \
-              --arg digest "$digest" \
-              --arg image_size "$size_human" \
-              --argjson image_size_bytes "$size_bytes" \
-              '{
-                version: $version,
-                commit: $commit,
-                build_time: $build_time,
-                image_tag: $image_tag,
-                digest: $digest,
-                image_size: $image_size,
-                image_size_bytes: $image_size_bytes
-              }' > "$infofile"
-          done
-
-      - name: Commit and push build-info if changed
-        run: |
-          cd upload-repo
-          git config --global user.name "${{ env.GIT_USERNAME }}"
-          git config --global user.email "${{ env.GIT_EMAIL }}"
-
-          if git status --porcelain | grep .; then
-            git add */build-info.json
-            git commit -m "Update build-info on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
-            git push
-
-            # Tag the commit for each version
-            for version in buster bullseye bookworm docker-build; do
-              TAG="build-$version"
-              # Delete local tag if exists
-              git tag -d "$TAG" 2>/dev/null || true
-              # Create tag on current HEAD
-              git tag "$TAG"
-              # Push tag to remote (force in case tag exists)
-              git push origin "$TAG" --force
-            done
+          # Load SHA256 from file if available
+          TARBALL_NAME="debian-$version.tar.bz2"
+          SHA256_LINE=$(grep -F "$TARBALL_NAME" sha256sums.txt || true)
+          if [[ -z "$SHA256_LINE" ]]; then
+            echo "[WARN] SHA256 for $TARBALL_NAME not found!"
+            SHA256="unknown"
           else
-            echo "[INFO] No build-info changes to commit."
-          fi
+            SHA256=$(echo "$SHA256_LINE" | awk '{print $1}')
+            echo "[INFO] SHA256 for $TARBALL_NAME: $SHA256"
+          fi
+
+          jq -n \
+            --arg version "$version" \
+            --arg commit "$(git rev-parse HEAD)" \
+            --arg build_time "$(date -u +'%Y-%m-%dT%H:%M:%SZ')" \
+            --arg image_tag "$image" \
+            --arg digest "$digest" \
+            --arg image_size "$size_human" \
+            --argjson image_size_bytes "$size_bytes" \
+            --arg sha256 "$SHA256" \
+            '{
+              version: $version,
+              commit: $commit,
+              build_time: $build_time,
+              image_tag: $image_tag,
+              digest: $digest,
+              image_size: $image_size,
+              image_size_bytes: $image_size_bytes,
+              rootfs_sha256: $sha256
+            }' > "$infofile"
+        done
+
+    - name: Clone upload repo
+      run: |
+        rm -rf upload-repo
+        GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+        git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+
+    - name: Copy build-info.json into repo
+      run: |
+        for version in $VERSIONS; do
+          mkdir -p "upload-repo/$version"
+          cp "buildinfo/$version/build-info.json" "upload-repo/$version/build-info.json"
+        done
+
+    - name: Commit and push build-info if changed
+      run: |
+        cd upload-repo
+        git config --global user.name "${{ env.GIT_USERNAME }}"
+        git config --global user.email "${{ env.GIT_EMAIL }}"
+
+        if git status --porcelain | grep .; then
+          git add */build-info.json
+          git commit -m "Update build-info on $(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+          git push
+
+          for version in $VERSIONS; do
+            TAG="build-$version"
+            git tag -d "$TAG" 2>/dev/null || true
+            git tag "$TAG"
+            git push origin "$TAG" --force
+          done
+        else
+          echo "[INFO] No build-info changes to commit."
+        fi

.gitea/workflows/file.txt

@@ -0,0 +1,194 @@
+VERSIONS: "buster bullseye bookworm"
+
+
+
+
+  # build-and-push-rootfs-archives:
+  #   runs-on: vm-docker-build2
+  #   outputs:
+  #     archives_changed: ${{ steps.commit_archives.outputs.archives_changed }}
+  #   steps:
+  #     - name: Checkout source
+  #       uses: actions/checkout@v3
+
+  #     - name: Create output directory
+  #       run: mkdir -p ./output
+
+  #     - name: Build all Debian rootfs versions into volumes and extract
+  #       run: |
+  #         versions=($VERSIONS)
+  #         for version in "${versions[@]}"; do
+  #           echo "[INFO] Building $version..."
+  #           volume_name="build_output_$version"
+  #           docker volume create "$volume_name"
+
+  #           docker build --build-arg VERSION=$version -t fithwum/debian-$version-base .
+
+  #           docker run --rm --privileged \
+  #             -v "$volume_name:/output" \
+  #             -e VERSION="$version" \
+  #             fithwum/debian-$version-base \
+  #             bash -c "/scripts/bootstrap-rootfs.sh \"$version\""
+
+  #           # Extract the output file from the volume
+  #           container_id=$(docker create -v "$volume_name:/output" debian)
+  #           mkdir -p ./output/$version
+  #           docker cp "$container_id:/output/$version/debian-$version.tar.bz2" ./output/$version/
+  #           docker rm "$container_id"
+  #         done
+
+  #     - name: Validate that archives exist for each version
+  #       run: |
+  #         IFS=' ' read -r -a versions <<< "$VERSIONS"
+  #         for version in "${versions[@]}"; do
+  #           path="./output/$version/debian-$version.tar.bz2"
+  #           if [[ ! -f "$path" ]]; then
+  #             echo "[ERROR] Missing archive: $path"
+  #             exit 1
+  #           else
+  #             echo "[OK] Found: $path"
+  #           fi
+  #         done
+
+  #     - name: Clone upload repo
+  #       run: |
+  #         GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+  #         git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+
+  #     - name: Clean old archives in upload-repo
+  #       run: rm -rfv upload-repo/*/*.tar.bz2
+
+  #     - name: Copy new archives to upload-repo
+  #       run: |
+  #         for filepath in ./output/*/debian-*.tar.bz2; do
+  #           version_dir=$(basename "$(dirname "$filepath")")
+  #           mkdir -p "upload-repo/$version_dir"
+  #           cp "$filepath" "upload-repo/$version_dir/"
+  #         done
+
+  #     - name: Calculate and store sha256sums in upload-repo
+  #       run: |
+  #         cd upload-repo
+  #         rm -f sha256sums.txt
+  #         for tarball in */debian-*.tar.bz2; do
+  #           echo "[INFO] Processing: $tarball"
+  #           checksum=$(sha256sum "$tarball" | awk '{print $1}')
+  #           echo "$checksum  $tarball" >> sha256sums.txt
+  #         done
+  #         echo "[INFO] SHA256 contents:"
+  #         cat sha256sums.txt
+
+  #     - name: Commit and push files if changed
+  #       id: commit_archives
+  #       run: |
+  #         cd upload-repo
+  #         git config --global user.name "${{ env.GIT_USERNAME }}"
+  #         git config --global user.email "${{ env.GIT_EMAIL }}"
+
+  #         if git status --porcelain | grep .; then
+  #           git add **/*.tar.bz2 sha256sums.txt || true
+  #           git commit -m "Update base images and checksum on $(date -u +'%Y-%m-%dT%H:%M:%SZ') [skip ci]"
+  #           git push
+  #           echo "archives_changed=true" >> $GITHUB_OUTPUT
+  #         else
+  #           echo "[INFO] No changes to commit."
+  #           echo "archives_changed=false" >> $GITHUB_OUTPUT
+  #         fi
+
+
+
+
+
+
+
+  build-and-push-rootfs-archives:
+    runs-on: vm-docker-build2
+    outputs:
+      archives_changed: ${{ steps.commit_archives.outputs.archives_changed }}
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v3
+
+      - name: Create output directory
+        run: mkdir -p ./output
+
+      - name: Build all Debian rootfs versions into volumes and extract
+        run: |
+          versions=($VERSIONS)
+          for version in "${versions[@]}"; do
+            echo "[INFO] Building $version..."
+            volume_name="build_output_$version"
+            docker volume create "$volume_name"
+
+            docker build --build-arg VERSION=$version -t fithwum/debian-$version-base .
+
+            docker run --rm --privileged \
+              -v "$volume_name:/output" \
+              -e VERSION="$version" \
+              fithwum/debian-$version-base \
+              bash -c "/scripts/bootstrap-rootfs.sh \"$version\""
+
+            # Extract the output file from the volume
+            container_id=$(docker create -v "$volume_name:/output" debian)
+            mkdir -p ./output/$version
+            docker cp "$container_id:/output/$version/debian-$version.tar.bz2" ./output/$version/
+            docker rm "$container_id"
+          done
+
+      - name: Validate that archives exist for each version
+        run: |
+          IFS=' ' read -r -a versions <<< "$VERSIONS"
+          for version in "${versions[@]}"; do
+            path="./output/$version/debian-$version.tar.bz2"
+            if [[ ! -f "$path" ]]; then
+              echo "[ERROR] Missing archive: $path"
+              exit 1
+            else
+              echo "[OK] Found: $path"
+            fi
+          done
+
+      - name: Clone upload repo
+        run: |
+          GIT_CREDENTIAL="${{ secrets.GIT_TOKEN || secrets.GIT_PASSWORD }}"
+          git clone --depth=1 "https://${{ env.GIT_USERNAME }}:${GIT_CREDENTIAL}@gitea.fithwum.tech/fithwum/debian-base.git" upload-repo
+
+      - name: Clean old archives in upload-repo
+        run: rm -rfv upload-repo/*/*.tar.bz2
+
+      - name: Copy new archives to upload-repo
+        run: |
+          for filepath in ./output/*/debian-*.tar.bz2; do
+            version_dir=$(basename "$(dirname "$filepath")")
+            mkdir -p "upload-repo/$version_dir"
+            cp "$filepath" "upload-repo/$version_dir/"
+          done
+
+      - name: Calculate and store sha256sums in upload-repo
+        run: |
+          cd upload-repo
+          rm -f sha256sums.txt
+          for tarball in */debian-*.tar.bz2; do
+            echo "[INFO] Processing: $tarball"
+            checksum=$(sha256sum "$tarball" | awk '{print $1}')
+            echo "$checksum  $tarball" >> sha256sums.txt
+          done
+          echo "[INFO] SHA256 contents:"
+          cat sha256sums.txt
+
+      - name: Commit and push files if changed
+        id: commit_archives
+        run: |
+          cd upload-repo
+          git config --global user.name "${{ env.GIT_USERNAME }}"
+          git config --global user.email "${{ env.GIT_EMAIL }}"
+
+          if git status --porcelain | grep .; then
+            git add **/*.tar.bz2 sha256sums.txt || true
+            git commit -m "Update base images and checksum on $(date -u +'%Y-%m-%dT%H:%M:%SZ') [skip ci]"
+            git push
+            echo "archives_changed=true" >> $GITHUB_OUTPUT
+          else
+            echo "[INFO] No changes to commit."
+            echo "archives_changed=false" >> $GITHUB_OUTPUT
+          fi

Dockerfile

@@ -1,21 +1,16 @@
-FROM gitea.fithwum.tech/fithwum/debian-base:bookworm
+# FROM gitea.fithwum.tech/fithwum/debian-base:bullseye
+FROM debian:latest
 
 ARG VERSION
+ENV VERSION=${VERSION}
+ENV OUTPUT_DIR=/output
 ENV DEBIAN_FRONTEND=noninteractive
-WORKDIR /builder
 
 RUN apt-get update && apt-get install -y \
-    debootstrap wget curl bash ftp-upload dirmngr locales sudo git \
+    debootstrap wget curl bash ftp-upload dirmngr locales sudo git bzip2 \
     && apt-get clean
 
-# Setup locale
-RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \
-    locale-gen && \
-    update-locale LANG=en_US.UTF-8
+COPY base-image-script/ /scripts/
+RUN chmod +x /scripts/*.sh
 
-COPY base-image-script/ base-image-script/
-
-RUN chmod +x base-image-script/*.sh
-
-# Default command overridden by workflow
 CMD ["bash"]

base-image-script/bootstrap-rootfs.sh

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+DEBIAN_RELEASE="${VERSION:-}"
+ROOTFS_DIR="debian-$DEBIAN_RELEASE"
+OUTPUT_DIR="/output"
+TARBALL="$OUTPUT_DIR/debian-$DEBIAN_RELEASE.tar.bz2"
+
+echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE rootfs..."
+apt-get update
+apt-get install -y --no-install-recommends debootstrap bzip2
+
+debootstrap --verbose --variant=minbase --components=main,contrib,non-free \
+  --include=apt,ca-certificates,bash,wget,curl,nano,locales,python3,python3-pip,libffi-dev --arch=amd64 "$DEBIAN_RELEASE" "$ROOTFS_DIR" \
+  http://deb.debian.org/debian/
+
+for dir in dev dev/pts proc sys; do
+  mount --bind "/$dir" "$ROOTFS_DIR/$dir"
+done
+
+echo "[CHROOT] Configuring Debian system..."
+chroot "$ROOTFS_DIR" /bin/bash <<'EOF'
+echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
+apt-get update
+apt-get upgrade
+apt-get install --no-install-recommends software-properties-common bash wget curl nano locales
+echo 'en_US.UTF-8 UTF-8' >> /etc/locale.gen
+locale-gen
+update-locale LANG=en_US.UTF-8
+apt-get remove --purge --allow-remove-essential pinentry-curses whiptail kmod iptables iproute2 dmidecode || true
+apt-get clean
+find /var/lib/apt/lists/ -type f -delete
+EOF
+
+echo "[INFO] Unmounting system directories (ignore errors)..."
+for dir in sys proc dev/pts dev; do
+  umount -lf "$ROOTFS_DIR/$dir" 2>/dev/null || true
+done
+
+echo "[INFO] Rootfs size:"
+du -sh "$ROOTFS_DIR"
+
+echo "[INFO] Creating compressed base image..."
+mkdir -p "$OUTPUT_DIR"
+tar -cjf "$TARBALL" -C "$ROOTFS_DIR" .
+
+ls -lh "$TARBALL"
+
+du -sh "$TARBALL"
+
+echo "[INFO] Tarball ready: $TARBALL"

base-image-script/debian-bookworm_pt1.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-set -o pipefail
-
-DEBIAN_RELEASE="bookworm"
-ROOTFS_DIR="debian-${DEBIAN_RELEASE}"
-SCRIPTS_DIR="base-image-script"
-PT2_SCRIPT="debian-${DEBIAN_RELEASE}_pt2.sh"
-PT3_SCRIPT="debian-build_pt3.sh"
-
-echo "[INFO] Preparing environment..."
-apt-get update -y
-apt-get upgrade -y
-apt-get install -y --no-install-recommends debootstrap bash curl wget dirmngr bzip2
-
-for SCRIPT in $PT2_SCRIPT $PT3_SCRIPT; do
-    if [ ! -f "./${SCRIPTS_DIR}/$SCRIPT" ]; then
-        echo "[ERROR] Missing script: ${SCRIPTS_DIR}/$SCRIPT"
-        exit 1
-    fi
-done
-
-echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE rootfs..."
-debootstrap --variant=minbase --components=main,contrib,non-free --include=apt,ca-certificates --arch=amd64 "$DEBIAN_RELEASE" "$ROOTFS_DIR" http://deb.debian.org/debian/
-
-for dir in dev dev/pts proc sys; do
-    mount --bind "/$dir" "$ROOTFS_DIR/$dir"
-done
-
-cp "./${SCRIPTS_DIR}/$PT2_SCRIPT" "$ROOTFS_DIR/root/$PT2_SCRIPT"
-chmod +x "$ROOTFS_DIR/root/$PT2_SCRIPT"
-
-chroot "$ROOTFS_DIR" /root/$PT2_SCRIPT
-
-bash "./${SCRIPTS_DIR}/$PT3_SCRIPT" "$ROOTFS_DIR"

base-image-script/debian-bookworm_pt2.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-echo "[CHROOT] Configuring Debian system..."
-echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
-
-apt-get update
-apt-get upgrade
-
-apt-get install --no-install-recommends software-properties-common bash wget curl nano locales
-
-echo "[CHROOT] Removing unnecessary packages..."
-apt-get remove --purge --allow-remove-essential pinentry-curses whiptail kmod iptables iproute2 dmidecode || true
-
-echo "[CHROOT] Cleaning up..."
-apt-get clean
-apt-get install -f
-find /var/lib/apt/lists/ -type f -delete
-
-echo "[CHROOT] Done. Type 'exit' to return."
-exit

base-image-script/debian-build_pt3.sh

@@ -1,36 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-
-# Auto-detect a single debian-* directory if not passed
-if [ -n "$1" ]; then
-    ROOTFS_DIR="$1"
-else
-    ROOTFS_DIR=$(find . -maxdepth 1 -type d -name "debian-*" | sed 's|^\./||' | head -n 1)
-    if [ -z "$ROOTFS_DIR" ]; then
-        echo "[ERROR] No debian-* rootfs directory found!"
-        exit 1
-    fi
-fi
-
-TARBALL="/output/${ROOTFS_DIR}.tar.bz2"
-
-echo "[INFO] Unmounting system directories (ignore errors)..."
-for dir in sys proc dev/pts dev; do
-    umount -lf "$ROOTFS_DIR/$dir" 2>/dev/null || true
-done
-
-echo "[INFO] Removing chroot script..."
-rm -f "$ROOTFS_DIR/root/${ROOTFS_DIR}_pt2.sh" 2>/dev/null || true
-
-echo "[INFO] Rootfs size:"
-du -sh "$ROOTFS_DIR"
-
-echo "[INFO] Creating compressed base image..."
-tar -cjf "$TARBALL" -C "$ROOTFS_DIR" .
-
-echo "[INFO] Image archive size:"
-du -sh "$TARBALL"
-
-echo "[INFO] Tarball ready for CI to upload: $TARBALL"

base-image-script/debian-bullseye_pt1.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-set -o pipefail
-
-DEBIAN_RELEASE="bullseye"
-ROOTFS_DIR="debian-${DEBIAN_RELEASE}"
-SCRIPTS_DIR="base-image-script"
-PT2_SCRIPT="debian-${DEBIAN_RELEASE}_pt2.sh"
-PT3_SCRIPT="debian-build_pt3.sh"
-
-echo "[INFO] Preparing environment..."
-apt-get update -y
-apt-get upgrade -y
-apt-get install -y --no-install-recommends debootstrap bash curl wget dirmngr bzip2
-
-for SCRIPT in $PT2_SCRIPT $PT3_SCRIPT; do
-    if [ ! -f "./${SCRIPTS_DIR}/$SCRIPT" ]; then
-        echo "[ERROR] Missing script: ${SCRIPTS_DIR}/$SCRIPT"
-        exit 1
-    fi
-done
-
-echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE rootfs..."
-debootstrap --variant=minbase --components=main,contrib,non-free --include=apt,ca-certificates --arch=amd64 "$DEBIAN_RELEASE" "$ROOTFS_DIR" http://deb.debian.org/debian/
-
-for dir in dev dev/pts proc sys; do
-    mount --bind "/$dir" "$ROOTFS_DIR/$dir"
-done
-
-cp "./${SCRIPTS_DIR}/$PT2_SCRIPT" "$ROOTFS_DIR/root/$PT2_SCRIPT"
-chmod +x "$ROOTFS_DIR/root/$PT2_SCRIPT"
-
-chroot "$ROOTFS_DIR" /root/$PT2_SCRIPT
-
-bash "./${SCRIPTS_DIR}/$PT3_SCRIPT" "$ROOTFS_DIR"

base-image-script/debian-bullseye_pt2.sh

@@ -1,26 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-echo "[CHROOT] Configuring Debian system..."
-echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
-
-apt-get update
-apt-get upgrade
-
-apt-get install --no-install-recommends software-properties-common bash wget curl nano locales
-
-echo "[CHROOT] Generating locales..."
-echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen
-locale-gen
-update-locale LANG=en_US.UTF-8
-
-echo "[CHROOT] Removing unnecessary packages..."
-apt-get remove --purge --allow-remove-essential pinentry-curses whiptail kmod iptables iproute2 dmidecode || true
-
-echo "[CHROOT] Cleaning up..."
-apt-get clean
-apt-get install -f
-find /var/lib/apt/lists/ -type f -delete
-
-echo "[CHROOT] Done. Type 'exit' to return."
-exit

base-image-script/debian-buster_pt1.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-set -o pipefail
-
-DEBIAN_RELEASE="buster"
-ROOTFS_DIR="debian-${DEBIAN_RELEASE}"
-SCRIPTS_DIR="base-image-script"
-PT2_SCRIPT="debian-${DEBIAN_RELEASE}_pt2.sh"
-PT3_SCRIPT="debian-build_pt3.sh"
-
-echo "[INFO] Preparing environment..."
-apt-get update -y
-apt-get upgrade -y
-apt-get install -y --no-install-recommends debootstrap bash curl wget dirmngr bzip2
-
-for SCRIPT in $PT2_SCRIPT $PT3_SCRIPT; do
-    if [ ! -f "./${SCRIPTS_DIR}/$SCRIPT" ]; then
-        echo "[ERROR] Missing script: ${SCRIPTS_DIR}/$SCRIPT"
-        exit 1
-    fi
-done
-
-echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE rootfs..."
-debootstrap --variant=minbase --components=main,contrib,non-free --include=apt,ca-certificates --arch=amd64 "$DEBIAN_RELEASE" "$ROOTFS_DIR" http://deb.debian.org/debian/
-
-for dir in dev dev/pts proc sys; do
-    mount --bind "/$dir" "$ROOTFS_DIR/$dir"
-done
-
-cp "./${SCRIPTS_DIR}/$PT2_SCRIPT" "$ROOTFS_DIR/root/$PT2_SCRIPT"
-chmod +x "$ROOTFS_DIR/root/$PT2_SCRIPT"
-
-chroot "$ROOTFS_DIR" /root/$PT2_SCRIPT
-
-bash "./${SCRIPTS_DIR}/$PT3_SCRIPT" "$ROOTFS_DIR"

base-image-script/debian-buster_pt2.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-echo "[CHROOT] Configuring Debian system..."
-echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
-
-apt-get update
-apt-get upgrade
-
-apt-get install --no-install-recommends software-properties-common bash wget curl nano locales
-
-echo "[CHROOT] Removing unnecessary packages..."
-apt-get remove --purge --allow-remove-essential pinentry-curses whiptail kmod iptables iproute2 dmidecode || true
-
-echo "[CHROOT] Cleaning up..."
-apt-get clean
-apt-get install -f
-find /var/lib/apt/lists/ -type f -delete
-
-echo "[CHROOT] Done. Exiting."
-exit

base-image-script/debian-docker-build_pt1.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-set -o pipefail
-
-DEBIAN_RELEASE="docker-build"
-ROOTFS_DIR="debian-${DEBIAN_RELEASE}"
-SCRIPTS_DIR="base-image-script"
-PT2_SCRIPT="debian-${DEBIAN_RELEASE}_pt2.sh"
-PT3_SCRIPT="debian-build_pt3.sh"
-
-echo "[INFO] Preparing environment..."
-apt-get update -y
-apt-get upgrade -y
-apt-get install -y --no-install-recommends debootstrap bash curl wget dirmngr bzip2
-
-for SCRIPT in $PT2_SCRIPT $PT3_SCRIPT; do
-    if [ ! -f "./${SCRIPTS_DIR}/$SCRIPT" ]; then
-        echo "[ERROR] Missing script: ${SCRIPTS_DIR}/$SCRIPT"
-        exit 1
-    fi
-done
-
-echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE rootfs..."
-debootstrap --variant=minbase --components=main,contrib,non-free --include=apt,ca-certificates --arch=amd64 bookworm "$ROOTFS_DIR" http://deb.debian.org/debian/
-
-for dir in dev dev/pts proc sys; do
-    mount --bind "/$dir" "$ROOTFS_DIR/$dir"
-done
-
-cp "./${SCRIPTS_DIR}/$PT2_SCRIPT" "$ROOTFS_DIR/root/$PT2_SCRIPT"
-chmod +x "$ROOTFS_DIR/root/$PT2_SCRIPT"
-
-chroot "$ROOTFS_DIR" /root/$PT2_SCRIPT
-
-bash "./${SCRIPTS_DIR}/$PT3_SCRIPT" "$ROOTFS_DIR"

base-image-script/debian-docker-build_pt2.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-echo "[CHROOT] Configuring Debian system..."
-echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
-
-apt-get update
-apt-get upgrade
-
-echo "[CHROOT] Installing Node.js..."
-curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
-apt-get install --no-install-recommends nodejs
-
-echo "[CHROOT] Installing Docker..."
-apt-get install ca-certificates curl gnupg lsb-release
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
-echo \
-  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
-  $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
-apt-get update
-
-apt-get install --no-install-recommends docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
-apt-get install --no-install-recommends software-properties-common bash wget curl nano python3 python3-pip python3-venv locales
-
-dpkg -l | grep python3-cryptography || echo "[OK] Not installed"
-
-echo "[CHROOT] Removing unnecessary packages..."
-apt-get remove --purge --allow-remove-essential pinentry-curses whiptail dmidecode || true
-
-echo "[CHROOT] Cleaning up..."
-apt-get clean
-apt-get install -f
-find /var/lib/apt/lists/ -type f -delete
-
-echo "[CHROOT] Done. Type 'exit' to return."
-exit

base-image-script/debian-test_pt1.sh

@@ -1,48 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-set -e
-set -o pipefail
-
-DEBIAN_RELEASE="bookworm"
-ROOTFS_DIR="debian-${DEBIAN_RELEASE}"
-SCRIPTS_URL="https://gitea.fithwum.tech/fithwum/files-for-dockers/raw/branch/master/base-image-script/"
-PT2_SCRIPT="debian-test_pt2.sh"
-PT3_SCRIPT="debian-build_pt3.sh"
-
-echo "[INFO] Preparing environment..."
-apt-get update -y
-apt-get upgrade -y
-apt-get install -y --no-install-recommends debootstrap bash curl wget ftp-upload dirmngr
-
-echo "[INFO] Downloading extra scripts if missing..."
-for SCRIPT in $PT2_SCRIPT $PT3_SCRIPT; do
-    if [ ! -f "./$SCRIPT" ]; then
-        echo "[INFO] Downloading $SCRIPT..."
-        wget --no-cache "$SCRIPTS_URL/$SCRIPT" -O "./$SCRIPT"
-        chmod +x "./$SCRIPT"
-    fi
-done
-
-echo "[INFO] Bootstrapping Debian $DEBIAN_RELEASE..."
-debootstrap \
-  --variant=minbase \
-  --components=main,contrib,non-free \
-  --include=apt,ca-certificates \
-  --arch=amd64 \
-  "$DEBIAN_RELEASE" "$ROOTFS_DIR" http://deb.debian.org/debian/
-
-echo "[INFO] Mounting system directories..."
-for dir in dev dev/pts proc sys; do
-    mount --bind /$dir "$ROOTFS_DIR/$dir"
-done
-
-echo "[INFO] Copying pt2 script into chroot..."
-cp "./$PT2_SCRIPT" "$ROOTFS_DIR/root/$PT2_SCRIPT"
-chmod +x "$ROOTFS_DIR/root/$PT2_SCRIPT"
-
-echo "[INFO] Entering chroot. Type 'exit' when done."
-chroot "$ROOTFS_DIR" /root/$PT2_SCRIPT
-
-echo "[INFO] Running pt3 for packaging and upload..."
-./$PT3_SCRIPT "$ROOTFS_DIR"

base-image-script/debian-test_pt2.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2025 fithwum
-# All rights reserved
-echo "[CHROOT] Configuring Debian system..."
-echo 'APT::Get::Assume-Yes "true";' > /etc/apt/apt.conf.d/10-assume_yes
-
-apt-get update
-apt-get upgrade
-
-echo "[CHROOT] Installing Node.js..."
-curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
-apt-get install --no-install-recommends nodejs
-
-echo "[CHROOT] Installing Docker..."
-apt-get install ca-certificates curl gnupg lsb-release
-mkdir -p /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
-echo \
-  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
-  $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
-apt-get update
-
-apt-get install --no-install-recommends docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
-apt-get install --no-install-recommends software-properties-common bash wget curl nano python3 python3-pip python3-venv locales
-
-dpkg -l | grep python3-cryptography || echo "[OK] Not installed"
-
-echo "[CHROOT] Removing unnecessary packages..."
-apt-get remove --purge --allow-remove-essential pinentry-curses whiptail dmidecode || true
-
-echo "[CHROOT] Cleaning up..."
-apt-get clean
-apt-get install -f
-find /var/lib/apt/lists/ -type f -delete
-
-echo "[CHROOT] Done. Type 'exit' to return."
-exit

bookworm/CHANGES.md

@@ -1,47 +1,3 @@
+## 2025-12-21T00:04:43Z
 
-## 2025-07-06T00:32:06Z
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-- fix repo url (fithwum)
-## 2025-07-06T00:40:35Z
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-## 2025-07-06T00:48:48Z
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-## 2025-07-06T00:57:06Z
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-## 2025-07-06T01:05:17Z
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-## 2025-07-06T01:22:33Z
-- update (fithwum)
-- Update .gitea/workflows/base-build.yml (fithwum)
-- Update changelogs on 2025-07-06T01:05:18Z (fithwum)
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-## 2025-07-06T02:05:32Z
-- fix spaceing in build logs (fithwum)
-- test (fithwum)
-- test (fithwum)
-- reenabled needs section in workflow (fithwum)
-- Update changelogs on 2025-07-06T01:22:34Z (fithwum)
-## 2025-07-06T13:00:31Z
-- autl build chain test (fithwum)
-- enable needs for build info after testing (fithwum)
-- Update build-info on 2025-07-06T12:34:12Z (fithwum)
+- b31cb55 2025-12-20 test (fithwum)

bookworm/Dockerfile

@@ -1,4 +1,4 @@
 FROM scratch
 LABEL maintainer="fithwum"
-ADD /debian-bookworm.tar.bz2 /
+ADD debian-bookworm.tar.bz2 /
 CMD ["/bin/bash"]

bookworm/build-info.json

@@ -1,9 +1,10 @@
 {
   "version": "bookworm",
-  "commit": "e06634eee8adfcda50b630196bf150b7babbadbc",
-  "build_time": "2025-07-06T13:01:36Z",
+  "commit": "a5ce9834ad805fe66e1647a1d4eae861bd0b7e35",
+  "build_time": "2025-12-20T17:20:38Z",
   "image_tag": "gitea.fithwum.tech/fithwum/debian-base:bookworm",
-  "digest": "unknown",
-  "image_size": "281MB",
-  "image_size_bytes": 295153546
+  "digest": "gitea.fithwum.tech/fithwum/debian-base@sha256:5c954228972b60057a94326bc50dda998fc5be414d639b1b06d421bdcffe0ea8",
+  "image_size": "304MB",
+  "image_size_bytes": 319684748,
+  "rootfs_sha256": "18ecdd166ff1b257a010d1e261db59f3c4cf25606d9e17dadbef14840752b1e9"
 }

bullseye/CHANGES.md

@@ -1,47 +1,3 @@
+## 2025-12-21T00:04:43Z
 
-## 2025-07-06T00:32:06Z
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-- fix repo url (fithwum)
-## 2025-07-06T00:40:35Z
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-## 2025-07-06T00:48:48Z
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-## 2025-07-06T00:57:06Z
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-## 2025-07-06T01:05:17Z
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-## 2025-07-06T01:22:33Z
-- update (fithwum)
-- Update .gitea/workflows/base-build.yml (fithwum)
-- Update changelogs on 2025-07-06T01:05:18Z (fithwum)
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-## 2025-07-06T02:05:32Z
-- fix spaceing in build logs (fithwum)
-- test (fithwum)
-- test (fithwum)
-- reenabled needs section in workflow (fithwum)
-- Update changelogs on 2025-07-06T01:22:34Z (fithwum)
-## 2025-07-06T13:00:31Z
-- autl build chain test (fithwum)
-- enable needs for build info after testing (fithwum)
-- Update build-info on 2025-07-06T12:34:12Z (fithwum)
+- b31cb55 2025-12-20 test (fithwum)

bullseye/Dockerfile

@@ -1,4 +1,4 @@
 FROM scratch
 LABEL maintainer="fithwum"
-ADD /debian-bullseye.tar.bz2 /
+ADD debian-bullseye.tar.bz2 /
 CMD ["/bin/bash"]

bullseye/build-info.json

@@ -1,9 +1,10 @@
 {
   "version": "bullseye",
-  "commit": "e06634eee8adfcda50b630196bf150b7babbadbc",
-  "build_time": "2025-07-06T13:01:36Z",
+  "commit": "a5ce9834ad805fe66e1647a1d4eae861bd0b7e35",
+  "build_time": "2025-12-20T17:20:23Z",
   "image_tag": "gitea.fithwum.tech/fithwum/debian-base:bullseye",
-  "digest": "unknown",
-  "image_size": "281MB",
-  "image_size_bytes": 295153546
+  "digest": "gitea.fithwum.tech/fithwum/debian-base@sha256:a5a37b822e24188309d73a4c39e0dc493fbd7bd55a9cdb0d6aaefd823d526eda",
+  "image_size": "208MB",
+  "image_size_bytes": 218759601,
+  "rootfs_sha256": "cb6f3686ad38ba72a484e55d017be1e19cac4ead23123391de2bd0bc64b06b03"
 }

buster/CHANGES.md

@@ -1,47 +0,0 @@
-
-## 2025-07-06T00:32:06Z
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-- fix repo url (fithwum)
-## 2025-07-06T00:40:35Z
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-## 2025-07-06T00:48:48Z
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-## 2025-07-06T00:57:06Z
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-## 2025-07-06T01:05:17Z
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-## 2025-07-06T01:22:33Z
-- update (fithwum)
-- Update .gitea/workflows/base-build.yml (fithwum)
-- Update changelogs on 2025-07-06T01:05:18Z (fithwum)
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-## 2025-07-06T02:05:32Z
-- fix spaceing in build logs (fithwum)
-- test (fithwum)
-- test (fithwum)
-- reenabled needs section in workflow (fithwum)
-- Update changelogs on 2025-07-06T01:22:34Z (fithwum)
-## 2025-07-06T13:00:31Z
-- autl build chain test (fithwum)
-- enable needs for build info after testing (fithwum)
-- Update build-info on 2025-07-06T12:34:12Z (fithwum)

buster/build-info.json

@@ -1,9 +0,0 @@
-{
-  "version": "buster",
-  "commit": "e06634eee8adfcda50b630196bf150b7babbadbc",
-  "build_time": "2025-07-06T13:01:36Z",
-  "image_tag": "gitea.fithwum.tech/fithwum/debian-base:buster",
-  "digest": "unknown",
-  "image_size": "281MB",
-  "image_size_bytes": 295153546
-}

docker-build/CHANGES.md

@@ -1,47 +0,0 @@
-
-## 2025-07-06T00:32:06Z
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-- fix repo url (fithwum)
-## 2025-07-06T00:40:35Z
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-- test (fithwum)
-## 2025-07-06T00:48:48Z
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-- test (fithwum)
-## 2025-07-06T00:57:06Z
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-- fix (fithwum)
-## 2025-07-06T01:05:17Z
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-- Update changelogs on 2025-07-06T00:40:36Z (fithwum)
-- Update changelogs on 2025-07-06T00:32:06Z (fithwum)
-- test fix (fithwum)
-## 2025-07-06T01:22:33Z
-- update (fithwum)
-- Update .gitea/workflows/base-build.yml (fithwum)
-- Update changelogs on 2025-07-06T01:05:18Z (fithwum)
-- Update changelogs on 2025-07-06T00:57:07Z (fithwum)
-- Update changelogs on 2025-07-06T00:48:49Z (fithwum)
-## 2025-07-06T02:05:32Z
-- fix spaceing in build logs (fithwum)
-- test (fithwum)
-- test (fithwum)
-- reenabled needs section in workflow (fithwum)
-- Update changelogs on 2025-07-06T01:22:34Z (fithwum)
-## 2025-07-06T13:00:32Z
-- autl build chain test (fithwum)
-- enable needs for build info after testing (fithwum)
-- Update build-info on 2025-07-06T12:34:12Z (fithwum)

docker-build/Dockerfile

@@ -1,4 +0,0 @@
-FROM scratch
-LABEL maintainer="fithwum"
-ADD /debian-docker-build.tar.bz2 /
-CMD ["/bin/bash"]

docker-build/build-info.json

@@ -1,9 +0,0 @@
-{
-  "version": "docker-build",
-  "commit": "e06634eee8adfcda50b630196bf150b7babbadbc",
-  "build_time": "2025-07-06T13:01:36Z",
-  "image_tag": "gitea.fithwum.tech/fithwum/debian-base:docker-build",
-  "digest": "unknown",
-  "image_size": "281MB",
-  "image_size_bytes": 295153546
-}

sha256sums.txt

@@ -0,0 +1,3 @@
+452ef61c9b24e0df006a4b3faea7d036cfa209fe714cda603b2a03b6c16b0893  ../output/bullseye/debian-bullseye.tar.bz2
+7f20193899eb6fe26175ecb63cff0a97a6318e1fa41ecdf9674573ca5ffd46e6  ../output/bookworm/debian-bookworm.tar.bz2
+e41a15ecbd9de55b265f8d23c4f74f6c161228da02bf4d0d9a19653302630c44  ../output/trixie/debian-trixie.tar.bz2

trixie/CHANGES.md

@@ -0,0 +1,3 @@
+## 2025-12-21T00:04:43Z
+
+- b31cb55 2025-12-20 test (fithwum)

trixie/Dockerfile

@@ -1,4 +1,4 @@
 FROM scratch
 LABEL maintainer="fithwum"
-ADD /debian-buster.tar.bz2 /
+ADD debian-trixie.tar.bz2 /
 CMD ["/bin/bash"]

trixie/build-info.json

@@ -0,0 +1,10 @@
+{
+  "version": "trixie",
+  "commit": "a5ce9834ad805fe66e1647a1d4eae861bd0b7e35",
+  "build_time": "2025-12-20T17:20:45Z",
+  "image_tag": "gitea.fithwum.tech/fithwum/debian-base:trixie",
+  "digest": "gitea.fithwum.tech/fithwum/debian-base@sha256:77e4922b5c37a3876c240072831d38f4a7cf72d6226cd96da0f0bb2b0af211e3",
+  "image_size": "117MB",
+  "image_size_bytes": 123027966,
+  "rootfs_sha256": "2e0909f40cc33ba12482ce274010990270df7af325dfdb8888723b978c333531"
+}