Using snapshot sources for installing packages

[csskevin]

Right now, we run RUN apt update && apt install [...] in the docker containers, however when the distro sources update, the packages also update to the newer version and might not be consistent with the server built dockerfile. Therefore, we should introduce using snapshot sources:

• https://snapshot.ubuntu.com/
• https://snapshot.debian.org/

[sebastian-felix]

RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install -y ca-certificates && apt-get update -S 20240422T000000Z && apt-get install -y --allow-downgrades make gcc libc6=2.39-0ubuntu8 libc6-dev -S 20240422T000000Z && apt-get clean

One example to do that?

[MarkusOstermayer]

Does not work on latest debian bookworm.

root@942c9ba1689c:/# apt-get update -S 20240422T000000Z
E: Command line option 'S' [from -S] is not understood in combination with the other options.
root@942c9ba1689c:/# apt-get install -y --allow-downgrades make gcc libc6=2.39-0ubuntu8 libc6-dev -S 20240422T000000Z
E: Command line option 'S' [from -S] is not understood in combination with the other options.

Regardless, we already have a working solution for debian and ubutu based challenges.

[ecomaikgolf]

Would work if we modify the apt sources list manually.

We could do a echo "deb https://snapshot.debian.org/archive/debian/20091004T111800Z/ lenny main" > /etc/... at the very start of the container.

This would also make apt-get less error prone for people that will remove the -S 2024... argument.

Problem is if we use anything else than ubuntu. We also have alpine for example. We are going to need for each of them a solution if we want it to be harmonized accross templates.

Docker image archive could also be an alternative.