From f524cc7e8a55cbcd6cf127efac30ea86b3f360fa Mon Sep 17 00:00:00 2001
From: Jan Zachmann <50990105+JanZachmann@users.noreply.github.com>
Date: Thu, 15 Oct 2026 14:25:35 +0200
Subject: [PATCH] chore: build and run on Debian 13

Debian 12 has left full security support. On Debian 13 the libraries
live in /usr/lib, so the builder copies them there.

Signed-off-by: Jan Zachmann 50990105+JanZachmann@users.noreply.github.com
---
 Cargo.lock |  6 +++---
 Cargo.toml |  2 +-
 Dockerfile | 10 +++++-----
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 89ce7fa..215fc35 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2278,7 +2278,7 @@ dependencies = [
 
 [[package]]
 name = "omnect-ui"
-version = "1.2.7"
+version = "1.2.8"
 dependencies = [
  "actix-files",
  "actix-http",
@@ -2321,7 +2321,7 @@ dependencies = [
 
 [[package]]
 name = "omnect-ui-core"
-version = "1.2.7"
+version = "1.2.8"
 dependencies = [
  "base64 0.23.1",
  "console_log",
@@ -3264,7 +3264,7 @@ dependencies = [
 
 [[package]]
 name = "shared_types"
-version = "1.2.7"
+version = "1.2.8"
 dependencies = [
  "anyhow",
  "crux_core",
diff --git a/Cargo.toml b/Cargo.toml
index 9442ae5..301fa98 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -66,4 +66,4 @@ edition = "2024"
 homepage = "https://www.omnect.io/home"
 license = "MIT OR Apache-2.0"
 repository = "git@github.com:omnect/omnect-ui.git"
-version = "1.2.7"
+version = "1.2.8"
diff --git a/Dockerfile b/Dockerfile
index cb188dd..65d9850 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG DOCKER_NAMESPACE=omnectweucopsacr.azurecr.io
-ARG BUILD_IMAGE=${DOCKER_NAMESPACE}/rust:bookworm
-ARG DISTROLESS_IMAGE=gcr.io/distroless/base-debian12:nonroot
+ARG BUILD_IMAGE=${DOCKER_NAMESPACE}/rust:trixie
+ARG DISTROLESS_IMAGE=gcr.io/distroless/base-debian13:nonroot
 
 FROM ${DISTROLESS_IMAGE} AS distroless
 
@@ -56,7 +56,7 @@ RUN bun run build
 RUN echo 'const p = JSON.parse(await Bun.file("package.json").text()); delete p.devDependencies; delete p.scripts; await Bun.write("/tmp/sbom-package.json", JSON.stringify(p, null, 2));' | bun run -
 
 # Stage 5: Build Rust backend for target architecture with embedded frontend
-FROM ${DOCKER_NAMESPACE}/rust:bookworm AS builder
+FROM ${DOCKER_NAMESPACE}/rust:trixie AS builder
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
@@ -90,7 +90,7 @@ SHELL ["/bin/bash", "-c"]
 RUN <<EOT
     set -eu
 
-    mkdir -p /copy/status.d
+    mkdir -p /copy/status.d /copy/usr/lib
 
     executable=(omnect-ui-bin)
 
@@ -135,7 +135,7 @@ RUN mkdir /cert
 FROM ${DISTROLESS_IMAGE} AS base
 COPY --from=builder --chown=10000:10000 /cert /cert
 COPY --from=builder /work/omnect-ui-bin /omnect-ui
-COPY --from=builder /copy/lib/ /lib/
+COPY --from=builder /copy/usr/lib/ /usr/lib/
 COPY --from=builder /copy/status.d /var/lib/dpkg/status.d
 # npm runtime metadata for SBOM generation (stripped of devDependencies)
 COPY --from=vue-build /tmp/sbom-package.json /sbom/npm/package.json