Add GCC 12.5 for Bullseye

Bronek · Bronek · commit 86efd2ca8400 · 2025-08-14T10:44:24.000+01:00
diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
@@ -92,6 +92,38 @@ jobs:
           echo "CONTAINER_IMAGE=${CONTAINER_REGISTRY}/${CONTAINER_REPO}/debian-${{ matrix.os.release }}" >> $GITHUB_ENV
           PLATFORM=${{ matrix.architecture.platform }}
           echo "PLATFORM_PAIR=${PLATFORM//\//-}" >> $GITHUB_ENV
+      - name: Prepare gcc image metadata
+        if: ${{ matrix.os.release == 'bullseye' }}
+        id: meta-gcc
+        uses: docker/metadata-action@v5
+        env:
+          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,manifest-descriptor
+        with:
+          # NOTE, tag and image must match base of docker/debian/Dockerfile
+          images: gcc
+          tags: |
+            type=raw,value=${{ matrix.os.compiler_version }}-${{ matrix.os.release }}
+          labels: |
+            org.opencontainers.image.authors=For inquiries, please use https://${{ github.repository }}/issues
+            org.opencontainers.image.documentation=https://${{ github.repository }}
+            org.opencontainers.image.vendor=XRPLF
+            org.opencontainers.image.title=${{ env.CONTAINER_REPOSITORY }}-gcc
+      - name: Build gcc image do not push
+        if: ${{ matrix.os.release == 'bullseye' }}
+        uses: docker/build-push-action@v6
+        with:
+          build-args: |
+            BUILDKIT_DOCKERFILE_CHECK=skip=InvalidDefaultArgInFrom
+            BUILDKIT_INLINE_CACHE=1
+          context: .
+          file: docker/debian/Dockerfile.gcc-${{ matrix.os.compiler_version }}-${{ matrix.os.release }}
+          outputs: type=image,name=gcc,push=false
+          platforms: ${{ matrix.architecture.platform }}
+          provenance: mode=max
+          push: false
+          sbom: true
+          labels: ${{ steps.meta-gcc.outputs.labels }}
+          tags: ${{ steps.meta-gcc.outputs.tags }}
       - name: Prepare container metadata
         id: meta
         uses: docker/metadata-action@v5
diff --git a/docker/debian/Dockerfile.gcc-12-bullseye b/docker/debian/Dockerfile.gcc-12-bullseye
@@ -0,0 +1,156 @@
+FROM buildpack-deps:bullseye
+
+## NOTE: EVERYTHING BELOW THIS COMMENT IS FROM
+## https://github.com/docker-library/gcc/blob/7070981b23d22d3ca790f87bff26f13f3614dd4c/12/Dockerfile
+
+
+RUN set -eux; \
+	apt-get update; \
+	apt-get install -y --no-install-recommends \
+# install abigail-tools so we can use abidiff later to verify that we don't break Debian packages
+		abigail-tools \
+	; \
+	rm -rf /var/lib/apt/lists/*
+
+# https://gcc.gnu.org/mirrors.html
+ENV GPG_KEYS \
+# 1024D/745C015A 1999-11-09 Gerald Pfeifer <gerald@pfeifer.com>
+	B215C1633BCA0477615F1B35A5B3A004745C015A \
+# 1024D/B75C61B8 2003-04-10 Mark Mitchell <mark@codesourcery.com>
+	B3C42148A44E6983B3E4CC0793FA9B1AB75C61B8 \
+# 1024D/902C9419 2004-12-06 Gabriel Dos Reis <gdr@acm.org>
+	90AA470469D3965A87A5DCB494D03953902C9419 \
+# 1024D/F71EDF1C 2000-02-13 Joseph Samuel Myers <jsm@polyomino.org.uk>
+	80F98B2E0DAB6C8281BDF541A7C8C3B2F71EDF1C \
+# 2048R/FC26A641 2005-09-13 Richard Guenther <richard.guenther@gmail.com>
+	7F74F97C103468EE5D750B583AB00996FC26A641 \
+# 1024D/C3C45C06 2004-04-21 Jakub Jelinek <jakub@redhat.com>
+	33C235A34C46AA3FFB293709A328C3A2C3C45C06 \
+# 4096R/09B5FA62 2020-05-28 Jakub Jelinek <jakub@redhat.com>
+	D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62
+
+# https://gcc.gnu.org/mirrors.html
+ENV GCC_MIRRORS \
+		https://ftpmirror.gnu.org/gcc \
+		https://mirrors.kernel.org/gnu/gcc \
+		https://bigsearcher.com/mirrors/gcc/releases \
+		http://www.netgull.com/gcc/releases \
+		https://ftpmirror.gnu.org/gcc \
+# "sourceware.org" is the canonical upstream release host (the host of "gcc.gnu.org")
+		https://sourceware.org/pub/gcc/releases \
+# only attempt the origin FTP as a mirror of last resort
+		ftp://ftp.gnu.org/gnu/gcc
+
+# Last Modified: 2025-07-11
+ENV GCC_VERSION 12.5.0
+# Docker EOL: 2027-01-11
+
+RUN set -ex; \
+	\
+	savedAptMark="$(apt-mark showmanual)"; \
+	apt-get update; \
+	apt-get install -y --no-install-recommends \
+		dpkg-dev \
+		flex \
+		gnupg \
+	; \
+	rm -r /var/lib/apt/lists/*; \
+	\
+	_fetch() { \
+		local fetch="$1"; shift; \
+		local file="$1"; shift; \
+		for mirror in $GCC_MIRRORS; do \
+			if curl -fL "$mirror/$fetch" -o "$file"; then \
+				return 0; \
+			fi; \
+		done; \
+		echo >&2 "error: failed to download '$fetch' from several mirrors"; \
+		return 1; \
+	}; \
+	\
+	_fetch "gcc-$GCC_VERSION/gcc-$GCC_VERSION.tar.xz.sig" 'gcc.tar.xz.sig'; \
+	_fetch "gcc-$GCC_VERSION/gcc-$GCC_VERSION.tar.xz" 'gcc.tar.xz'; \
+	export GNUPGHOME="$(mktemp -d)"; \
+	for key in $GPG_KEYS; do \
+		gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
+	done; \
+	gpg --batch --verify gcc.tar.xz.sig gcc.tar.xz; \
+	gpgconf --kill all; \
+	rm -rf "$GNUPGHOME"; \
+	mkdir -p /usr/src/gcc; \
+	tar -xf gcc.tar.xz -C /usr/src/gcc --strip-components=1; \
+	rm gcc.tar.xz*; \
+	\
+	cd /usr/src/gcc; \
+	\
+# "download_prerequisites" pulls down a bunch of tarballs and extracts them,
+# but then leaves the tarballs themselves lying around
+	./contrib/download_prerequisites; \
+	{ rm *.tar.* || true; }; \
+	\
+# explicitly update autoconf config.guess and config.sub so they support more arches/libcs
+	for f in config.guess config.sub; do \
+		wget -O "$f" "https://git.savannah.gnu.org/cgit/config.git/plain/$f?id=7d3d27baf8107b630586c962c057e22149653deb"; \
+# find any more (shallow) copies of the file we grabbed and update them too
+		find -mindepth 2 -name "$f" -exec cp -v "$f" '{}' ';'; \
+	done; \
+	\
+	dir="$(mktemp -d)"; \
+	cd "$dir"; \
+	\
+	extraConfigureArgs=''; \
+	dpkgArch="$(dpkg --print-architecture)"; \
+	case "$dpkgArch" in \
+# with-arch: https://salsa.debian.org/toolchain-team/gcc/-/blob/gcc-13-debian/debian/rules2#L533-573
+# with-float: https://salsa.debian.org/toolchain-team/gcc/-/blob/gcc-13-debian/debian/rules2#L521-523
+# with-mode: https://salsa.debian.org/toolchain-team/gcc/-/blob/gcc-13-debian/debian/rules2#L571
+		armel) \
+			extraConfigureArgs="$extraConfigureArgs --with-arch=armv5te --with-float=soft" \
+			;; \
+		armhf) \
+			# https://bugs.launchpad.net/ubuntu/+source/gcc-defaults/+bug/1939379/comments/2
+			extraConfigureArgs="$extraConfigureArgs --with-arch=armv7-a+fp --with-float=hard --with-mode=thumb" \
+			;; \
+		\
+# with-arch-32: https://salsa.debian.org/toolchain-team/gcc/-/blob/gcc-13-debian/debian/rules2#L670
+		i386) \
+			extraConfigureArgs="$extraConfigureArgs --with-arch-32=i686"; \
+			;; \
+	esac; \
+	\
+	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; \
+	/usr/src/gcc/configure \
+		--build="$gnuArch" \
+		--disable-multilib \
+		--enable-languages=c,c++,fortran,go \
+		$extraConfigureArgs \
+	; \
+	make -j "$(nproc)"; \
+	make install-strip; \
+	\
+	cd ..; \
+	\
+	rm -rf "$dir" /usr/src/gcc; \
+	\
+	apt-mark auto '.*' > /dev/null; \
+	[ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; \
+	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false
+
+# gcc installs .so files in /usr/local/lib64 (and /usr/local/lib)...
+RUN set -ex; \
+# this filename needs to sort higher than all the architecture filenames ("aarch64-...", "armeabi...", etc)
+	{ echo '/usr/local/lib64'; echo '/usr/local/lib'; } > /etc/ld.so.conf.d/000-local-lib.conf; \
+	ldconfig -v; \
+	# the libc created by gcc might be too old for a newer Debian
+	# check that the Debian libstdc++ doesn't have newer requirements than the gcc one
+	deb="$(readlink -ve /usr/lib/*/libstdc++.so* | head -1)"; \
+	gcc="$(readlink -ve /usr/local/lib*/libstdc++.so | head -1)"; \
+# using LD_PRELOAD to make sure "abidiff" itself doesn't fail with the exact error we're trying to test for 😂😭
+	LD_PRELOAD="$deb" abidiff --no-added-syms "$deb" "$gcc"
+
+# ensure that alternatives are pointing to the new compiler and that old one is no longer used
+RUN set -ex; \
+	dpkg-divert --divert /usr/bin/gcc.orig --rename /usr/bin/gcc; \
+	dpkg-divert --divert /usr/bin/g++.orig --rename /usr/bin/g++; \
+	dpkg-divert --divert /usr/bin/gfortran.orig --rename /usr/bin/gfortran; \
+	update-alternatives --install /usr/bin/cc cc /usr/local/bin/gcc 999
diff --git a/docker/debian/README.md b/docker/debian/README.md
@@ -34,6 +34,30 @@ Build image for `gcc` supports packaging.
 In order to build an image, run the commands below from the root directory of
 the repository.
 
+#### Note on old Debian releases
+
+This image supports variety of releases of Debian, GCC and Clang.
+
+The GCC binaries are sourced from [Docker "Official Image" for gcc](https://github.com/docker-library/gcc)
+with an important caveat - in order to install a GCC release in an older
+Debian releases, we keep a local copy of `Dockerfile` from the above repository,
+backported to an older Debian base image. Such dockerfiles are stored in `docker/debian`
+with special file extension, e.g. `gcc-12-bullseye`. They are not altered from
+the source, except for change of the base image to older Debian release. They also
+show in a comment the specific `Dockerfile` they have been sourced from.
+
+If you want to build a build image for such an older release, you should first
+build GCC using an appropriate image, giving it the exact name and tag as
+used by the main `Dockerfile`, e.g. `gcc:12-bullseye`. This may require significant
+CPU resources and take some time (e.g. 30 minutes using 40 cores with fast NVME storage)
+and it's needed to ensure that we do not use an old GCC release with known, and fixed, bugs.
+
+For example:
+
+```shell
+docker buildx build . --progress plain --file docker/debian/Dockerfile.gcc-12-bullseye --tag gcc:12-bullseye
+```
+
 #### Building the Docker image for GCC
 
 Ensure you've run the login command above to authenticate with the Docker
