feat(docker): migrate base image from Alpine to Debian (#7606)

Author: DennisOSRM

.github/workflows/osrm-backend-docker.yml

@@ -18,7 +18,7 @@ jobs:
     if: github.repository == 'Project-OSRM/osrm-backend'
     strategy: &docker-base-image-matrix
       matrix:
-        docker-base-image: ["alpine"]
+        docker-base-image: ["debian"]
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo

.github/workflows/osrm-backend.yml

@@ -215,7 +215,7 @@ jobs:
   docker-build-extract-test:
     strategy:
       matrix:
-        docker-base-image: ['alpine']
+        docker-base-image: ['debian']
     needs: [format-taginfo-docs, vcpkg-smoke-prereq]
     if: github.repository == 'Project-OSRM/osrm-backend'
     runs-on: ubuntu-latest

README.md

@@ -62,7 +62,7 @@ If you want to use the CH pipeline instead replace `osrm-partition` and `osrm-cu
 
 ### Using Docker
 
-We base our Docker images ([backend](https://github.com/Project-OSRM/osrm-backend/pkgs/container/osrm-backend), [frontend](https://hub.docker.com/r/osrm/osrm-frontend/)) on Alpine Linux and make sure they are as lightweight as possible. Older backend versions can be found on [Docker Hub](https://hub.docker.com/r/osrm/osrm-backend/).
+We base our Docker images ([backend](https://github.com/Project-OSRM/osrm-backend/pkgs/container/osrm-backend), [frontend](https://hub.docker.com/r/osrm/osrm-frontend/)) on Debian Linux and make sure they are as lightweight as possible. Older backend versions can be found on [Docker Hub](https://hub.docker.com/r/osrm/osrm-backend/).
 
 Download OpenStreetMap extracts for example from [Geofabrik](http://download.geofabrik.de/)
 

docker/Dockerfile

@@ -1 +1 @@
-Dockerfile-alpine
+Dockerfile-debian

docker/Dockerfile-alpine docker/Dockerfile-debiandocker/Dockerfile-alpine renamed to docker/Dockerfile-debian

@@ -1,52 +1,36 @@
 # syntax=docker/dockerfile:1.7
-FROM alpine:3.23.4 AS alpine-mimalloc
-
-RUN apk update && \
-    apk upgrade && \
-    apk add --no-cache mimalloc
-
-ENV LD_PRELOAD=/usr/lib/libmimalloc.so.2
-ENV MIMALLOC_LARGE_OS_PAGES=1
-
-
-FROM alpine-mimalloc AS builder
+FROM debian:trixie-slim AS builder
 ARG DOCKER_TAG
 ARG BUILD_CONCURRENCY
 # Pinned vcpkg baseline; keep in sync with vcpkg-configuration.json at the repo root.
-ARG VCPKG_COMMIT=d015e31e90838a4c9dfa3eed45979bc70d9357fc
+ARG VCPKG_COMMIT=c3867e714dd3a51c272826eea77267876517ed99
 
-# vcpkg needs system-provided build tools on musl — VCPKG_FORCE_SYSTEM_BINARIES
-# prevents it from downloading glibc-built cmake/ninja that would fail on Alpine.
-RUN apk add --no-cache \
+RUN apt-get update && \
+    apt-get -y --no-install-recommends --no-install-suggests install \
         autoconf \
         automake \
-        bash \
-        build-base \
+        build-essential \
         ca-certificates \
         ccache \
         cmake \
         curl \
-        curl-dev \
-        g++ \
-        gcc \
         git \
         libtool \
-        linux-headers \
         make \
-        musl-dev \
-        ninja \
-        perl \
-        pkgconfig \
+        ninja-build \
+        pkg-config \
         tar \
         unzip \
-        zip
+        zip && \
+    rm -rf /var/lib/apt/lists/*
 
 # NOTE: VCPKG_ROOT lives outside /opt so the runstage's COPY --from=builder /opt
 # /opt doesn't drag the ~5 GB vcpkg tree along.
 ENV VCPKG_ROOT=/vcpkg \
     VCPKG_FORCE_SYSTEM_BINARIES=1
-RUN git clone --no-checkout https://github.com/microsoft/vcpkg.git ${VCPKG_ROOT} && \
-    git -C ${VCPKG_ROOT} checkout ${VCPKG_COMMIT} && \
+RUN mkdir -p ${VCPKG_ROOT} && \
+    curl -fsSL https://github.com/microsoft/vcpkg/archive/${VCPKG_COMMIT}.tar.gz | \
+    tar -xz --strip-components=1 -C ${VCPKG_ROOT} && \
     ${VCPKG_ROOT}/bootstrap-vcpkg.sh -disableMetrics
 
 WORKDIR /src
@@ -82,10 +66,13 @@ RUN --mount=type=cache,target=/root/.cache/vcpkg/archives,sharing=locked \
         --clean-buildtrees-after-build \
         --clean-packages-after-build
 
+# Now copy the rest of the source tree. This layer is the one that gets
+# invalidated by code changes — everything above stays cached.
 COPY . /src
 
 RUN --mount=type=cache,target=/root/.ccache \
     NPROC=${BUILD_CONCURRENCY:-$(nproc)} && \
+    export CXXFLAGS="-Wno-array-bounds -Wno-uninitialized -Wno-stringop-overflow" && \
     export CCACHE_DIR=/root/.ccache && \
     export CCACHE_MAXSIZE=2G && \
     export CCACHE_COMPRESSLEVEL=6 && \
@@ -102,11 +89,16 @@ RUN --mount=type=cache,target=/root/.ccache \
         -DCMAKE_TOOLCHAIN_FILE=${VCPKG_ROOT}/scripts/buildsystems/vcpkg.cmake \
         -DCMAKE_BUILD_TYPE=${BUILD_TYPE} \
         -DENABLE_ASSERTIONS=${ENABLE_ASSERTIONS} \
-        -DENABLE_LTO=OFF \
+        -DENABLE_LTO=On \
         -DCMAKE_C_COMPILER_LAUNCHER=ccache \
         -DCMAKE_CXX_COMPILER_LAUNCHER=ccache && \
     ninja -j${NPROC} install && \
     ccache -s && \
+    # Copy the TBB shared lib out of vcpkg so the runstage image can load it
+    # without bringing in the whole vcpkg tree. Boost, expat, bzip2, lua, fmt
+    # etc. all link statically under the x64-linux triplet, so only TBB needs
+    # runtime shipping. In manifest mode vcpkg installs per-build under
+    # build/vcpkg_installed/<triplet>/, not $VCPKG_ROOT/installed/.
     mkdir -p /opt/vcpkg-runtime-libs && \
     find vcpkg_installed -name 'libtbb*.so*' -exec cp -a {} /opt/vcpkg-runtime-libs/ \; && \
     cd ../profiles && \
@@ -116,18 +108,20 @@ RUN --mount=type=cache,target=/root/.ccache \
 
 
 # Multistage build to reduce image size - https://docs.docker.com/build/building/multi-stage/#use-multi-stage-builds
-# Only the content below ends up in the image, this helps remove /src from the image (which is large)
-FROM alpine-mimalloc AS runstage
+# Only the content below ends up in the image, this helps remove /src and vcpkg from the image.
+FROM debian:trixie-slim AS runstage
 
 COPY --from=builder /usr/local /usr/local
 COPY --from=builder /opt /opt
 COPY --from=builder /opt/vcpkg-runtime-libs/ /usr/local/lib/
 
-RUN apk add --no-cache \
-        libcap-setcap \
-        libgcc \
-        libstdc++ && \
-    ldconfig /usr/local/lib || true
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends --no-install-suggests \
+        libgcc-s1 \
+        libstdc++6 && \
+    rm -rf /var/lib/apt/lists/* && \
+# Add /usr/local/lib to ldconfig so TBB (and any other shared vcpkg libs) load
+    ldconfig /usr/local/lib
 
 RUN /usr/local/bin/osrm-extract --help && \
     /usr/local/bin/osrm-routed --help && \
@@ -137,4 +131,4 @@ RUN /usr/local/bin/osrm-extract --help && \
 
 WORKDIR /opt
 
-EXPOSE 5000
+EXPOSE 5000

docker/hooks/build

@@ -10,4 +10,3 @@
 DOCKER_BUILD="docker build --build-arg BUILD_CONCURRENCY=${CONCURRENCY} --build-arg DOCKER_TAG=${DOCKER_TAG:?unset} -t ${IMAGE_NAME:?unset} -f"
 
 $DOCKER_BUILD Dockerfile ..
-$DOCKER_BUILD Dockerfile-alpine ..

src/python/README.md

@@ -50,15 +50,6 @@ sudo dnf install -y \
     tbb-devel libxml2-devel libzip-devel
 ```
 
-**Alpine**
-
-```
-apk add --no-cache \
-    cmake clang make git pkgconf \
-    boost-dev bzip2-dev lua5.4-dev \
-    onetbb-dev libxml2-dev libzip-dev expat-dev
-```
-
 **macOS (Homebrew)**
 
 ```