New repo key and Bookworm image

.gitlab-ci.yml

@@ -19,3 +19,14 @@ build-bullseye:
   script:
     - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
     - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile.bullseye --destination $CI_REGISTRY_IMAGE/bullseye:$CI_COMMIT_TAG
+
+build-bookworm:
+  only:
+    - master
+  stage: build
+  image:
+    name: gcr.io/kaniko-project/executor:debug
+    entrypoint: [""]
+  script:
+    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
+    - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile.bookworm --destination $CI_REGISTRY_IMAGE/bookworm:$CI_COMMIT_TAG

Dockerfile.bookworm

+FROM debian:bookworm AS uffd-base
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN dpkg-divert --divert /usr/lib/python3.11/EXTERNALLY-MANAGED.diverted --rename /usr/lib/python3.11/EXTERNALLY-MANAGED && \
+    apt-get -qq update && \
+    apt-get -qq dist-upgrade && \
+    apt-get -qq install \
+        lsb-release openjdk-17-jre-headless curl ca-certificates \
+        sqlite3 locales-all git \
+        python3 python3-venv python3-coverage python3-ldap3 python3-flask python3-flask-sqlalchemy python3-flask-migrate \
+        python3-pip python3-qrcode python3-fido2 python3-oauthlib python3-flask-babel python3-argon2 python3-pytest python3-all python3-pip \
+        git-buildpackage debhelper dh-python mariadb-server python3-mysqldb python3-requests-oauthlib python3-git python3-prometheus-client libffi-dev \
+        redis-server && \
+    pip3 install pylint html5validator twine build --upgrade && \
+    apt-get -qq clean
+
+COPY cccv-archive-key.gpg /etc/apt/trusted.gpg.d/
+COPY cccv-archive-bookworm.list /etc/apt/sources.list.d/

cccv-archive-bookworm.list

+deb https://packages.cccv.de/uffd bookworm main