chore: bump vcpkg baseline, Alpine to 3.23.4, add curl-dev, drop broken CI dispatch (#7599)

* chore: bump vcpkg baseline, Alpine to 3.23.4, add curl-dev, drop broken CI dispatch

- Bump vcpkg baseline commit from c3867e7 to d015e31 across all
  workflow files, Dockerfiles, and vcpkg-configuration.json
- Bump Alpine base image from 3.21.2 to 3.23.4
- Add curl-dev to Alpine builder dependencies
- Remove 'Trigger CI for tag' step from release-monthly.yml: the
  GITHUB_TOKEN push doesn't trigger workflow runs, making this
  dispatch ineffective; binaries are now built via the tag-triggered
  osrm-backend.yml run directly

* chore: switch to Alpine-only Docker images, drop Debian support

- Delete docker/Dockerfile-debian
- Replace docker/Dockerfile symlink with full Alpine-based Dockerfile
- Fix Dockerfile-alpine comment that referenced Dockerfile-debian
- Remove 'debian' from docker-base-image matrices in both CI workflows
- Update README: Debian → Alpine Linux

* fix: add perl-ipc-cmd to Alpine Dockerfiles for OpenSSL vcpkg build

vcpkg's openssl port requires Perl IPC::Cmd module, which is packaged
separately from base perl on Alpine.

* Revert "fix: add perl-ipc-cmd to Alpine Dockerfiles for OpenSSL vcpkg build"

perl-ipc-cmd doesn't exist as a separate Alpine package — IPC::Cmd
is included in Alpine's base perl package (verified on perl 5.42.2-r0).

* chore: symlink docker/Dockerfile to Dockerfile-alpine

Since we only support Alpine now, the default Dockerfile should
point to the Alpine variant to avoid duplication and drift.

Author: DennisOSRM

.github/workflows/osrm-backend-docker.yml

@@ -18,7 +18,7 @@ jobs:
     if: github.repository == 'Project-OSRM/osrm-backend'
     strategy: &docker-base-image-matrix
       matrix:
-        docker-base-image: ["debian", "alpine"]
+        docker-base-image: ["alpine"]
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo

.github/workflows/osrm-backend.yml

@@ -18,7 +18,7 @@ env:
   ENABLE_NODE_BINDINGS: 'ON'
   # vcpkg baseline is also pinned in vcpkg-configuration.json; this env var
   # is what lukka/run-vcpkg consumes to pick the vcpkg tool version.
-  VCPKG_COMMIT_ID: c3867e714dd3a51c272826eea77267876517ed99
+  VCPKG_COMMIT_ID: d015e31e90838a4c9dfa3eed45979bc70d9357fc
   # Use a local filesystem directory as vcpkg's binary cache. The directory
   # itself is persisted across CI runs via actions/cache@v5. The x-gha
   # backend was removed upstream; files+actions/cache is the replacement.
@@ -215,7 +215,7 @@ jobs:
   docker-image-matrix:
     strategy:
       matrix:
-        docker-base-image: ['debian', 'alpine']
+        docker-base-image: ['alpine']
     needs: [format-taginfo-docs, vcpkg-smoke-prereq]
     if: github.repository == 'Project-OSRM/osrm-backend'
     runs-on: ubuntu-22.04
@@ -240,7 +240,7 @@ jobs:
           tags: osrm-backend-local
           load: true
           # Persist BuildKit layer + vcpkg/ccache mount cache across runs via
-          # GitHub Actions cache. Scope per base image so alpine/debian don't
+          # GitHub Actions cache. Scope per base image so different images don't
           # collide.
           cache-from: type=gha,scope=docker-${{ matrix.docker-base-image }}
           cache-to: type=gha,mode=max,scope=docker-${{ matrix.docker-base-image }}

.github/workflows/release-monthly.yml

@@ -143,15 +143,6 @@ jobs:
           git push origin "$BRANCH"
           git push origin "${{ steps.version.outputs.tag }}"
 
-      - name: Trigger CI for tag
-        env:
-          GH_TOKEN: ${{ secrets.BACKEND_RELEASE_TOKEN }}
-        run: |
-          # GITHUB_TOKEN pushes don't trigger workflow runs (prevents loops).
-          # Explicitly dispatch CI on the tag so binaries get built and uploaded.
-          gh workflow run osrm-backend.yml --ref "${{ steps.version.outputs.tag }}"
-          echo "Dispatched osrm-backend.yml on ${{ steps.version.outputs.tag }}"
-
       - name: Generate changelog
         id: changelog
         run: |

.github/workflows/vcpkg-smoke.yml

@@ -31,7 +31,7 @@ concurrency:
 
 env:
   # Keep in sync with vcpkg-configuration.json baseline.
-  VCPKG_COMMIT_ID: c3867e714dd3a51c272826eea77267876517ed99
+  VCPKG_COMMIT_ID: d015e31e90838a4c9dfa3eed45979bc70d9357fc
   # Use a local filesystem directory as vcpkg's binary cache. The directory
   # itself is persisted across CI runs via actions/cache@v5. The x-gha
   # backend was removed upstream; files+actions/cache is the replacement.

README.md

@@ -62,7 +62,7 @@ If you want to use the CH pipeline instead replace `osrm-partition` and `osrm-cu
 
 ### Using Docker
 
-We base our Docker images ([backend](https://github.com/Project-OSRM/osrm-backend/pkgs/container/osrm-backend), [frontend](https://hub.docker.com/r/osrm/osrm-frontend/)) on Debian and make sure they are as lightweight as possible. Older backend versions can be found on [Docker Hub](https://hub.docker.com/r/osrm/osrm-backend/).
+We base our Docker images ([backend](https://github.com/Project-OSRM/osrm-backend/pkgs/container/osrm-backend), [frontend](https://hub.docker.com/r/osrm/osrm-frontend/)) on Alpine Linux and make sure they are as lightweight as possible. Older backend versions can be found on [Docker Hub](https://hub.docker.com/r/osrm/osrm-backend/).
 
 Download OpenStreetMap extracts for example from [Geofabrik](http://download.geofabrik.de/)
 

docker/Dockerfile

@@ -1 +1 @@
-Dockerfile-debian
+Dockerfile-alpine

docker/Dockerfile-alpine

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1.7
-FROM alpine:3.21.2 AS alpine-mimalloc
+FROM alpine:3.23.4 AS alpine-mimalloc
 
 RUN apk update && \
     apk upgrade && \
@@ -13,7 +13,7 @@ FROM alpine-mimalloc AS builder
 ARG DOCKER_TAG
 ARG BUILD_CONCURRENCY
 # Pinned vcpkg baseline; keep in sync with vcpkg-configuration.json at the repo root.
-ARG VCPKG_COMMIT=c3867e714dd3a51c272826eea77267876517ed99
+ARG VCPKG_COMMIT=d015e31e90838a4c9dfa3eed45979bc70d9357fc
 
 # vcpkg needs system-provided build tools on musl — VCPKG_FORCE_SYSTEM_BINARIES
 # prevents it from downloading glibc-built cmake/ninja that would fail on Alpine.
@@ -26,6 +26,7 @@ RUN apk add --no-cache \
         ccache \
         cmake \
         curl \
+        curl-dev \
         g++ \
         gcc \
         git \
@@ -50,8 +51,12 @@ RUN git clone --no-checkout https://github.com/microsoft/vcpkg.git ${VCPKG_ROOT}
 
 WORKDIR /src
 
-# Install manifest deps as their own layer — see Dockerfile-debian for the
-# rationale. Cache mounts persist across docker builds on the host.
+# Install manifest deps as their own layer so source-only changes don't
+# invalidate the (expensive) vcpkg install. The three cache mounts persist
+# across docker builds on the host:
+#   - /root/.cache/vcpkg/archives : vcpkg's per-package binary cache (the big win)
+#   - /vcpkg/downloads            : upstream tarball cache (avoids re-downloading boost, etc.)
+#   - /vcpkg/buildtrees           : partial builds (helps when a single port fails)
 COPY vcpkg.json vcpkg-configuration.json ./
 COPY vcpkg-overlay-ports/ ./vcpkg-overlay-ports/
 RUN --mount=type=cache,target=/root/.cache/vcpkg/archives,sharing=locked \

docker/Dockerfile-debian

@@ -3,7 +3,7 @@
   "default-registry": {
     "kind": "git",
     "repository": "https://github.com/microsoft/vcpkg",
-    "baseline": "c3867e714dd3a51c272826eea77267876517ed99"
+    "baseline": "d015e31e90838a4c9dfa3eed45979bc70d9357fc"
   },
   "overlay-ports": [
     "vcpkg-overlay-ports"