From 474c534046cd7a15d4052568a7783265fafd754c Mon Sep 17 00:00:00 2001 From: Vincent Roseberry Date: Thu, 22 Oct 2026 04:07:03 +0000 Subject: [PATCH] Update ca-certificates Follow-up from #1566 http://b/576329498 --- Dockerfile.tmpl | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile.tmpl b/Dockerfile.tmpl index 132bebf6..e6beb37e 100644 --- a/Dockerfile.tmpl +++ b/Dockerfile.tmpl @@ -56,6 +56,9 @@ RUN uv pip install --system --no-cache "pycuda" # as described by Lionel Chan at http://stackoverflow.com/a/37426929/5881346 RUN sed -i "s/httpredir.debian.org/debian.uchicago.edu/" /etc/apt/sources.list && \ apt-get update --allow-releaseinfo-change && \ + # Debian's trixie-security ca-certificates 20250419+deb13u1 blocklists it in the system store. + # TODO(b/576329498): Remove upgrade to ca-certificates once the base image ships the newer version. + apt-get install --no-install-recommends -y --only-upgrade ca-certificates && \ # Needed by lightGBM (GPU build) # https://lightgbm.readthedocs.io/en/latest/GPU-Tutorial.html#build-lightgbm apt-get install -y build-essential unzip cmake libboost-dev libboost-system-dev libboost-filesystem-dev p7zip-full && \