fix(releasing): make libz.so.1 a consistent dynamic runtime dependency in distroless-libc (#25434)

Author: thomasqueirozb

.github/workflows/publish.yml

@@ -91,7 +91,7 @@ jobs:
         run: |
           dnf install -y --setopt=install_weak_deps=False \
             gcc gcc-c++ make cmake perl perl-IPC-Cmd \
-            openssl-devel cyrus-sasl-devel \
+            openssl-devel cyrus-sasl-devel zlib-devel \
             pkgconfig clang \
             rpm-build sudo \
             git tar gzip xz which findutils \

Cargo.lock

@@ -7,6 +7,12 @@ RUN dpkg -i vector_*_"$(dpkg --print-architecture)".deb
 
 RUN mkdir -p /var/lib/vector
 
+# Stage libz at its arch-specific path so it can be copied into the distroless
+# runtime. distroless/cc does not include zlib; vector (via rdkafka) links
+# against it dynamically and we deliberately keep it as a runtime dependency.
+RUN src=$(dpkg -L zlib1g | grep -E '/libz\.so\.1$') && \
+    install -D "$(realpath "$src")" "/staging${src}"
+
 # distroless doesn't use static tags
 # hadolint ignore=DL3007
 FROM gcr.io/distroless/cc-debian12:latest@sha256:329e54034ce498f9c6b345044e8f530c6691f99e94a92446f68c0adf9baa8464
@@ -21,6 +27,7 @@ COPY --from=builder /usr/share/doc/vector /usr/share/doc/vector
 COPY --from=builder /usr/share/vector /usr/share/vector
 COPY --from=builder /etc/vector /etc/vector
 COPY --from=builder /var/lib/vector /var/lib/vector
+COPY --from=builder /staging/ /
 
 # Smoke test
 RUN ["vector", "--version"]