Skip to content

chore: build and run on Debian 13, update all dependencies - #161

Merged
JanZachmann merged 2 commits into
omnect:mainfrom
JanZachmann:chore-debian-13
Oct 16, 2026
Merged

JanZachmann merged 2 commits into
omnect:mainfrom
JanZachmann:chore-debian-13

Conversation

@JanZachmann

Copy link
Copy Markdown
Contributor

Summary

  • Update all dependencies to the latest versions, including base64 0.23, validator 0.21 and omnect-crypto 0.5.0.
  • omnect-crypto 0.5.0 removed the unused extensions argument of create_cert_and_key. Without a CSR it still adds the same extensions as 0.4.0.
  • Runtime image distroless/base-debian12 → base-debian13. The image no longer copies /copy/lib.
  • build-image.sh builds with rust:trixie, the latest stable toolchain.
  • The deb package depends on libc6 (>= 2.39), and the README names the minimum host.
  • Bump version to 0.28.5.

Reason

Debian 12 has left full security support and is in its LTS phase. Debian 13 has full support until 2028.

A binary built on Debian 13 needs glibc 2.39. Without the new libc6 dependency, dpkg installs the package on Ubuntu 22.04 and omnect-cli then fails at start with GLIBC_2.39 not found. Now dpkg rejects it there. Hosts older than Ubuntu 24.04 / Debian 13 can use the docker image.

On Debian 13 all libraries live in /usr/lib, so dpkg -S returns /usr/lib/... paths and /copy/lib is not created.

validator 0.21 no longer pulls in the unmaintained proc-macro-error2.

This can be merged only when the omnect/rust:trixie image exists in the registry, and integration tests must run on a host with glibc 2.39 or later.

omnect-crypto 0.5.0 removed the unused extensions argument of
create_cert_and_key. Without a CSR it still adds the same extensions.

validator 0.21 no longer pulls in the unmaintained proc-macro-error2.

Signed-off-by: Jan Zachmann 50990105+JanZachmann@users.noreply.github.com
Debian 12 has left full security support. A binary built on Debian 13
needs glibc 2.39, so the deb package now depends on libc6 (>= 2.39).
On Debian 13 all libraries live in /usr/lib, so the image no longer
copies /lib.

Signed-off-by: Jan Zachmann 50990105+JanZachmann@users.noreply.github.com
@JanZachmann
JanZachmann requested a review from mlilien October 15, 2026 13:11
@JanZachmann
JanZachmann merged commit 6263360 into omnect:main Oct 16, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants