install kea from official repo

https://kb.isc.org/docs/isc-kea-packages
https://cloudsmith.io/~isc/repos/kea-dev/packages/

Author: sorah

kea/Dockerfile

@@ -44,18 +44,28 @@ RUN jsonnet /tmp/kea-ctrl-agent.jsonnet > /app/kea-ctrl-agent.json
 
 FROM $BASE
 
-RUN mkdir -p /run/kea /app
+RUN mkdir -p /run/kea /app /etc/apt/keyrings
+RUN rm -fv /etc/apt/apt.conf.d/docker-clean
 VOLUME /run/kea
 
-RUN apt-get update \
+RUN  --mount=type=cache,target=/var/cache/apt --mount=type=cache,target=/var/lib/apt/lists apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y \
       ca-certificates \
       dumb-init \
       ruby \
       iproute2 \
-      kea \
-      mysql-client \
-    && apt-get clean && rm -rf /var/lib/apt/lists/*
+      mysql-client
+
+ARG kea_version 2.7.6-isc20250128083638
+COPY kea-dev.asc /etc/apt/keyrings/kea-dev.asc
+RUN echo "deb [signed-by=/etc/apt/keyrings/kea-dev.asc] https://dl.cloudsmith.io/public/isc/kea-dev/deb/ubuntu noble main" > /etc/apt/sources.list.d/kea.list
+RUN echo "Package: src:isc-kea\nPin: version ${kea_version}\nPin-Priority: 999" > /etc/apt/preferences.d/pin-kea
+RUN  --mount=type=cache,target=/var/cache/apt --mount=type=cache,target=/var/lib/apt/lists apt-get update \
+    && DEBIAN_FRONTEND=noninteractive apt-get install -y \
+      isc-kea-dhcp4-server \
+      isc-kea-mysql \
+      isc-kea-ctrl-agent \
+      isc-kea-admin
 
 COPY --from=build-healthz /app/bin/healthz /app/healthzd
 COPY --from=build-stork /build/go/bin/stork-agent /app/stork-agent

kea/kea-dev.asc

@@ -0,0 +1,24 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=CXSr
+-----END PGP PUBLIC KEY BLOCK-----