ci: Use docker slim images where possible (#454)

Author: hneiva

taskcluster/docker/fetch/Dockerfile

@@ -1,4 +1,5 @@
-FROM debian:11
+FROM debian:12-slim
+MAINTAINER Release Engineering <[email protected]>
 
 ### Add worker user and setup its workspace.
 RUN mkdir /builds && \

taskcluster/docker/python/Dockerfile

@@ -2,8 +2,8 @@
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
-FROM python:3.9
-LABEL maintainer="Andrew Halberstadt <ahal@mozilla.com>"
+FROM python:3.12-slim
+MAINTAINER Release Engineering <release@mozilla.com>
 
 # Add worker user
 RUN mkdir /builds && \
@@ -13,8 +13,16 @@ RUN mkdir /builds && \
 
 # %include-run-task
 
-RUN apt-get update && apt-get install -y --force-yes --no-install-recommends \
-    mercurial build-essential zlib1g-dev libssl-dev git
+RUN apt-get update \
+ && apt-get install -y --reinstall ca-certificates \
+ && apt-get install -y --force-yes --no-install-recommends \
+    mercurial \
+    build-essential \
+    zlib1g-dev \
+    libssl-dev \
+    curl \
+    git \
+    build-essential zlib1g-dev libffi-dev libssl-dev libbz2-dev libreadline-dev libsqlite3-dev liblzma-dev pkg-config
 
 ENV SHELL=/bin/bash \
     HOME=/builds/worker \

taskcluster/docker/skopeo/Dockerfile

@@ -27,7 +27,8 @@ RUN ["/usr/local/go/bin/go", "build", \
     "./cmd/umoci"]
 
 
-FROM debian:buster
+FROM debian:12-slim
+MAINTAINER Release Engineering <[email protected]>
 
 # %include-run-task
 

taskcluster/kinds/tests/kind.yml

@@ -48,16 +48,17 @@ tasks:
                 TOX_PARALLEL_NO_SPINNER: "1"
         run:
             command: >-
+                pyenv local 3.12 3.11 3.10 3.9 3.8 &&
                 pip install --user -r requirements/test.txt --require-hashes &&
                 pip install --user --no-deps . &&
-                pyenv local 3.12 3.11 3.10 3.9 3.8 &&
                 tox --parallel
     type-check:
         description: "Run type checking against src with Pyright"
         treeherder:
             symbol: type-check
         run:
             command: >-
+                pyenv local 3.12 3.11 3.10 3.9 3.8 &&
                 pip install --user -r requirements/test.txt --require-hashes &&
                 pip install --user --no-deps . &&
                 pyright

taskcluster/scripts/pyenv-setup

@@ -23,7 +23,7 @@ git -C "$(pyenv root)" rev-parse HEAD
 for i in ${1//,/ }
 do
     version=$(pyenv latest --known $i)
-    pyenv install $version
+    pyenv install $version --verbose
 done
 chmod 777 /builds/worker/.pyenv/shims
 pyenv rehash