chore: migrate Rust server runtime images from debian:trixie-slim to ubi-minimal

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "(?x)( package-lock\\.json$ |Cargo\\.lock$ |uv\\.lock$ |go\\.sum$ |mcpgateway/sri_hashes\\.json$ )|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2026-06-26T16:10:47Z",
+  "generated_at": "2026-06-26T19:31:11Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"

a2a-agents/rust/a2a-echo-agent/Dockerfile

@@ -11,9 +11,9 @@ COPY mcp-servers/rust/slow-time-server ./mcp-servers/rust/slow-time-server
 COPY a2a-agents/rust/a2a-echo-agent ./a2a-agents/rust/a2a-echo-agent
 RUN cargo build --release -p a2a-echo-agent
 
-FROM docker.io/library/debian:trixie-slim
-RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl \
-    && rm -rf /var/lib/apt/lists/* \
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all \
     && useradd -r -s /bin/false mcpuser
 WORKDIR /app
 COPY --from=builder /app/target/release/a2a-echo-agent /app/a2a-echo-agent

mcp-servers/rust/benchmark-server/Containerfile

@@ -12,9 +12,9 @@ COPY mcp-servers/rust/benchmark-server/src ./mcp-servers/rust/benchmark-server/s
 RUN touch mcp-servers/rust/benchmark-server/src/main.rs \
     && cargo build --release -p benchmark-server
 
-FROM docker.io/library/debian:trixie-slim
-RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl \
-    && rm -rf /var/lib/apt/lists/* \
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all \
     && useradd -r -s /bin/false mcpuser
 WORKDIR /app
 COPY --from=builder /app/target/release/benchmark-server /app/benchmark-server

mcp-servers/rust/benchmark-server/Dockerfile

@@ -12,9 +12,9 @@ COPY mcp-servers/rust/benchmark-server/src ./mcp-servers/rust/benchmark-server/s
 RUN touch mcp-servers/rust/benchmark-server/src/main.rs \
     && cargo build --release -p benchmark-server
 
-FROM docker.io/library/debian:trixie-slim
-RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl \
-    && rm -rf /var/lib/apt/lists/* \
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all \
     && useradd -r -s /bin/false mcpuser
 WORKDIR /app
 COPY --from=builder /app/target/release/benchmark-server /app/benchmark-server

mcp-servers/rust/fast-time-server/Containerfile

@@ -32,15 +32,12 @@ RUN touch src/main.rs && cargo build --release
 # =============================================================================
 # Runtime stage - Minimal distroless-like image
 # =============================================================================
-FROM docker.io/library/debian:trixie-slim
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
 
 # Install runtime deps (ca-certificates + curl for health checks) and create
 # the non-root mcpuser in a single layer.
-RUN apt-get update && apt-get install -y --no-install-recommends \
-        ca-certificates \
-        curl \
-    && rm -rf /var/lib/apt/lists/* \
-    && apt-get clean \
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all \
     && useradd -r -s /bin/false mcpuser
 
 WORKDIR /app

mcp-servers/rust/fast-time-server/Dockerfile

@@ -25,12 +25,10 @@ COPY src ./src
 RUN touch src/main.rs && cargo build --release
 
 # Runtime stage - minimal image
-FROM docker.io/library/debian:trixie-slim
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    ca-certificates \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all
 
 WORKDIR /app
 

mcp-servers/rust/slow-time-server/Containerfile

@@ -12,9 +12,9 @@ COPY mcp-servers/rust/slow-time-server/src ./mcp-servers/rust/slow-time-server/s
 RUN touch mcp-servers/rust/slow-time-server/src/main.rs \
     && cargo build --release -p slow-time-server
 
-FROM docker.io/library/debian:trixie-slim
-RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl \
-    && rm -rf /var/lib/apt/lists/* \
+FROM registry.access.redhat.com/ubi10/ubi-minimal:10.2-1777462752
+RUN microdnf install -y ca-certificates curl shadow-utils \
+    && microdnf clean all \
     && useradd -r -s /bin/false mcpuser
 WORKDIR /app
 COPY --from=builder /app/target/release/slow-time-server /app/slow-time-server