Java 21 upgrade break Debian version consistency

[GwenaelPellenArkeup]

Hello.

Merge request #584 break Debian version consistency

Today, download image google/cloud-sdk:debian_component_based, debian version is wrong.

documentation say

:debian_component_based, :VERSION-debian_component_based: Similar to stable, with additional components (List of components installed in the image are listed here) pre-installed. The image is build upon the latest Google-Provided Debian 12 base image and uses component manager to install the components. To install specific gcloud versions, use the :VERSION-debian_component_based tag.

but

docker run -i -t --rm google/cloud-sdk:debian_component_based lsb_release -cs
trixie

How ? (i search)

docker pull google/cloud-sdk:debian_component_based
...

show debian distribution

docker run -i -t --rm google/cloud-sdk:debian_component_based lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 13 (trixie)
Release:        13
Codename:       trixie

show source.list

docker run -i -t --rm google/cloud-sdk:debian_component_based cat /etc/apt/sources.list
deb http://deb.debian.org/debian/ sid main

show debian.sources

docker run -i -t --rm google/cloud-sdk:debian_component_based cat /etc/apt/sources.list.d/debian.sources 
Types: deb
# http://snapshot.debian.org/archive/debian/20250520T000000Z
URIs: http://deb.debian.org/debian
Suites: bookworm bookworm-updates
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Types: deb
# http://snapshot.debian.org/archive/debian-security/20250520T000000Z
URIs: http://deb.debian.org/debian-security
Suites: bookworm-security
Components: main
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

show policy

docker run -i -t --rm google/cloud-sdk:debian_component_based apt-cache policy
Package files:
 100 /var/lib/dpkg/status
     release a=now
 500 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages
     release v=12,o=Debian,a=stable-security,n=bookworm-security,l=Debian-Security,c=main,b=amd64
     origin deb.debian.org
 500 http://deb.debian.org/debian bookworm-updates/main amd64 Packages
     release v=12-updates,o=Debian,a=stable-updates,n=bookworm-updates,l=Debian,c=main,b=amd64
     origin deb.debian.org
 500 http://deb.debian.org/debian bookworm/main amd64 Packages
     release v=12.11,o=Debian,a=stable,n=bookworm,l=Debian,c=main,b=amd64
     origin deb.debian.org
 500 http://deb.debian.org/debian sid/main amd64 Packages
     release o=Debian,a=unstable,n=sid,l=Debian,c=main,b=amd64
     origin deb.debian.org
Pinned packages:

so,

cloud-sdk-docker/debian_component_based/Dockerfile

Line 20 in f8051c7

apt-get update -qqy && apt-get -qqy upgrade && \

run an update and upgrade package, change distribution name and version.

docker run -i -t --rm google/cloud-sdk:debian_component_based apt-cache policy lsb-release
lsb-release:
  Installed: 12.1-1
  Candidate: 12.1-1
  Version table:
 *** 12.1-1 500
        500 http://deb.debian.org/debian sid/main amd64 Packages
        100 /var/lib/dpkg/status
     12.0-1 500
        500 http://deb.debian.org/debian bookworm/main amd64 Packages

docker run -i -t --rm google/cloud-sdk:debian_component_based lsb_release -a                
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 13 (trixie)
Release:        13
Codename:       trixie

This break all package installation with "lsb_release -cs" (return "trixie")

[anindyatahsin]

Hi @GwenaelPellenArkeup , this is a stop gap solution as our emulators actually require java 21 and debian 12 (bookwarm) does not support the Java 21 stable version. So we needed to get the Java 21 dependency from the sed (unstable / testing) repository until debian 13 is officially released (which is scheduled for release very soon). Getting the Java 21 dependency from the sed repository is causing the inconsistency and we'll get it resolved when the debian 13 is released.

Until then, if this is breaking your use-case(s), you can pin the gcloud version to 528.0.0 or build your own docker image removing the sed repository (and getting java 17 instead). However this would break the Datastore and Firestore emulator components.

[anindyatahsin]

Hi @GwenaelPellenArkeup, We have rolled back the Java 21 update on the latest image to preserve version consistency. Java 21 is still available on the :emulators image as the image is specifically created to support the gcloud emulators and some of the emulators directly depends on Java-21.

The latest gcloud image is the most used gcloud docker image. Any particular reason you are using the debian_component_based image? Would you consider moving to the latest image instead as it is the most used image and thus the most maintained image?

Since the debian_component_based image is the least used gcloud docker image, we are trying to get feedback from the users of the image about the use-cases which lead them to use the image and want to support those use-cases on the latest image whenever possible.

Please feel free to provide your feedback so that we can support your use-cases better.

[jsoref]

openjdk 21 appears to be available in trixie:
https://packages.debian.org/trixie/openjdk-21-jdk

$ docker run --rm -it debian:trixie
...
root@de87695640c4:/# apt update
...
root@de87695640c4:/# apt install -y openjdk-21
...
Setting up openjdk-21-jdk:arm64 (21.0.8+9-1) ...
update-alternatives: using /usr/lib/jvm/java-21-openjdk-arm64/bin/jconsole to provide /usr/bin/jconsole (jconsole) in auto mode
Processing triggers for ca-certificates (20250419) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Processing triggers for libgdk-pixbuf-2.0-0:arm64 (2.42.12+dfsg-4) ...
Processing triggers for ca-certificates-java (20240118) ...
done.

That said, as of today,

$ docker run -i -t --rm google/cloud-sdk:debian_component_based
...
root@deb2e4eb0f44:/# lsb_release -cs
forky
root@deb2e4eb0f44:/# cat /etc/apt/sources.list
deb http://deb.debian.org/debian/ sid main
root@deb2e4eb0f44:/# dpkg -l |grep jdk
ii  openjdk-21-jre-headless:amd64   21.0.9~8ea-1                   amd64        OpenJDK Java runtime, using Hotspot JIT (headless)