fix: introduce alpine3.22 images (#411)

* fix: try older version to use older kernels

* fix: remove legacy-kernel (debian) build, keep alpine3.22 only

The debian-slim based legacy-kernel image did not work as intended.
Remove its Dockerfile target, CI build/push steps, and FAQ references.
Keep the alpine3.22 pinned variant which works correctly.

Author: BlackDark

.github/workflows/build.yml

@@ -126,6 +126,38 @@ jobs:
             GITHUB_REPO=${{ steps.vars.outputs.repo }}
             GITHUB_SHA=${{ steps.vars.outputs.sha }}
 
+      - name: Docker meta for alpine3.22 image
+        id: meta_alpine322
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ghcr.io/raydak-labs/configarr
+            docker.io/configarr/configarr,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+          tags: |
+            type=ref,event=branch,prefix=dev-,suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'true' }}
+            type=schedule,suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+            type=ref,event=branch,suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+            type=semver,pattern={{version}},suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+            type=semver,pattern={{major}}.{{minor}},suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+            type=semver,pattern={{major}},suffix=-alpine3.22,enable=${{ steps.set_platforms.outputs.MANUAL_RUN == 'false' }}
+
+      - name: Build and push alpine3.22 image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: ${{ steps.set_platforms.outputs.platforms }}
+          push: ${{ steps.set_platforms.outputs.push }}
+          tags: ${{ steps.meta_alpine322.outputs.tags }}
+          labels: ${{ steps.meta_alpine322.outputs.labels }}
+          target: prod-alpine-3-22
+          build-args: |
+            CONFIGARR_VERSION=${{ steps.vars.outputs.version }}
+            BUILD_TIME=${{ steps.vars.outputs.build_time }}
+            GITHUB_RUN_ID=${{ steps.vars.outputs.run_id }}
+            GITHUB_REPO=${{ steps.vars.outputs.repo }}
+            GITHUB_SHA=${{ steps.vars.outputs.sha }}
+
       # - name: Docker Hub Description
       #   if: github.event_name != 'pull_request'
       #   uses: peter-evans/dockerhub-description@v3

Dockerfile

@@ -66,3 +66,19 @@ ARG CONFIGARR_VERSION=dev
 ENV CONFIGARR_VERSION=${CONFIGARR_VERSION}
 # Run with dumb-init to not start node with PID=1, since Node.js was not designed to run as PID 1
 CMD ["dumb-init", "node", "index.js"]
+
+# Compatibility target pinned to Alpine 3.22.
+# Useful for testing old-kernel behavior with a fixed Alpine/git stack.
+FROM node:24.14.0-alpine3.22 AS prod-alpine-3-22
+WORKDIR /app
+
+RUN apk add --no-cache libstdc++ dumb-init git
+
+# Allow global git access independent of container user and directory user. See #240, #241
+RUN git config --global --add safe.directory '*'
+
+COPY --from=builder /app/bundle.cjs /app/index.js
+
+ARG CONFIGARR_VERSION=dev
+ENV CONFIGARR_VERSION=${CONFIGARR_VERSION}
+CMD ["dumb-init", "node", "index.js"]

docs/docs/faq.md

@@ -133,6 +133,20 @@ env:
 
 When this variable is set, Configarr will perform standard git clones without the `--filter=blob:none` or `--sparse` options, which should work with older kernel versions.
 
+If your kernel is very old and the error still happens (for example `unable to get random bytes for temporary file: Function not implemented`), use the `alpine3.22` image tag which pins the Alpine base for compatibility:
+
+```yaml
+services:
+  configarr:
+    image: ghcr.io/raydak-labs/configarr:<version>-alpine3.22
+```
+
+Example:
+
+```yaml
+image: ghcr.io/raydak-labs/configarr:v1.24.0-alpine3.22
+```
+
 Reference issues:
 
 - https://github.com/raydak-labs/configarr/issues/367