Use latest openssl from upstream bookworm

Signed-off-by: Dom Del Nano <ddelnano@gmail.com>

Author: ddelnano

bazel/cc_toolchains/sysroots/sysroots.bzl

@@ -20,10 +20,10 @@ load("//bazel/cc_toolchains:utils.bzl", "abi")
 SYSROOT_LOCATIONS = dict(
     sysroot_x86_64_glibc2_36_runtime = dict(
         sha256 = "0f6c8147394c41a5c10715d0859ca2ef6e03d65a52b5959f6e11f1de7513f3a4",
+        sha256 = "a13c96cce26f9603fb99b5ef262f65a5ee85b9cac7817024a209bd5402f600ca",
         strip_prefix = "",
         urls = [
-            "https://github.com/pixie-io/dev-artifacts/releases/download/sysroots%2Fpl8/sysroot-amd64-runtime.tar.gz",
-            "https://storage.googleapis.com/pixie-dev-public/sysroots/pl8/sysroot-amd64-runtime.tar.gz",
+            "https://github.com/ddelnano/dev-artifacts/releases/download/sysroots%2Fpl13/sysroot-amd64-runtime.tar.gz",
         ],
     ),
     sysroot_x86_64_glibc2_36_build = dict(

scripts/create_release_for_dev_artifact.sh

@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-repo="pixie-io/dev-artifacts"
+repo="ddelnano/dev-artifacts"
 
 if [[ $# -lt 3 ]]; then
   echo "Usage: $0 <release-name> <version> [<artifact>...]"
@@ -30,7 +30,7 @@ artifacts=( "${@:3}" )
 tag_name="${release_name}/${version}"
 
 repo_dir="$(mktemp -d)"
-git clone git@github.com:pixie-io/dev-artifacts.git "${repo_dir}"
+git clone git@github.com:ddelnano/dev-artifacts.git "${repo_dir}"
 
 pushd "${repo_dir}" &> /dev/null
 git tag "${tag_name}"

tools/docker/Makefile

@@ -60,7 +60,7 @@ GRAALVM_ARCHIVE_FNAME := graalvm-native-image-22.3.0.tar.gz
 GRAALVM_ARCHIVE_GS_PATH := gs://pixie-dev-public/graalvm-native-image-22.3.0-$(GRAALVM_IMAGE_VERSION).tar.gz
 
 ## Sysroot parameters
-SYSROOT_REV := pl8
+SYSROOT_REV := pl14
 SYSROOT_BUILD_DIR := $(BUILD_DIR)/sysroots
 SYSROOT_ARCHITECTURES := amd64 arm64
 SYSROOT_VARIANTS := runtime build test
@@ -266,7 +266,7 @@ build_all_sysroots: sysroot_creator/Dockerfile sysroot_creator/build_all_sysroot
 
 .PHONY: upload_all_sysroots
 upload_all_sysroots: build_all_sysroots
-	gsutil cp $(SYSROOT_BUILD_DIR)/* $(SYSROOT_GS_PATH)
+	# gsutil cp $(SYSROOT_BUILD_DIR)/* $(SYSROOT_GS_PATH)
 	$(GH_RELEASE_UPLOAD) sysroots $(SYSROOT_REV) $(SYSROOT_BUILD_DIR)/*
 	sha256sum $(SYSROOT_BUILD_DIR)/*
 

tools/docker/sysroot_creator/Dockerfile

@@ -17,7 +17,10 @@
 FROM debian:bookworm@sha256:ee71fe8b4093251ca8462c29b2d78cdb491fd124a20350c89cd3456a43324a73
 
 RUN apt-get update -y && \
-  apt-get install -y golang curl xz-utils
+  apt-get install -y curl xz-utils
+
+RUN curl -fL https://go.dev/dl/go1.23.8.linux-amd64.tar.gz | tar -C /usr/local -xz
+ENV PATH="/usr/local/go/bin:${PATH}"
 
 RUN curl -L https://github.com/mikefarah/yq/releases/download/v4.30.8/yq_linux_amd64 -o /bin/yq && \
   chmod +x /bin/yq

tools/docker/sysroot_creator/build_tar_for_packages.sh

@@ -28,6 +28,7 @@ if [ "$#" -lt 4 ]; then
 fi
 
 debian_mirror="${DEBIAN_MIRROR:-http://ftp.us.debian.org/debian/}"
+debian_security_mirror="${DEBIAN_SECURITY_MIRROR:-http://security.debian.org/debian-security/}"
 
 package_satisifier_path="$(realpath "$1")"
 package_database_file="$(realpath "$2")"
@@ -40,7 +41,11 @@ done
 
 debs=()
 while read -r deb; do
-  debs+=("${debian_mirror}/${deb}")
+  if [[ "${deb}" == pool/updates/* ]]; then
+    debs+=("${debian_security_mirror}/${deb}")
+  else
+    debs+=("${debian_mirror}/${deb}")
+  fi
 done < <("${package_satisifier_path}" "${package_parser_args[@]}")
 
 echo "Dependencies to be added to archive:"