T7557: Use Debian trixie as build base for container and VyOS image

[sever-sever]

Change summary

Use Debian trixie as the build base for the container vyos-build and the VyOS image

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe): Update Debian distro as base

Related Task(s)

• https://vyos.dev/T7557

Related PR(s)

• T7557: Updates for Debian Trixie vyos-1x#4576
• T7557: Update the Python requirement to 3.13 vyos-http-api-tools#25
• T7557: Updates for Debian Trixie vyatta-cfg#104
• vbash: T7575: Update to bash 5.2.37 vyatta-bash#15

Above PRs are needed for build to succeed

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[github-actions]

👍
No issues in PR Title / Commit Title

[c-po]

IMHO this is a pretty dangerous change as long as the base system is not also updated to trixie. We always changed the container and base system at once during the past.

[sever-sever]

IMHO this is a pretty dangerous change as long as the base system is not also updated to trixie

It includes and updates the base system from the trixie repos if I didn't miss something.
The build fails at the moment, so marked it as draft

[2025-06-16 15:58:05] lb chroot_package-lists install
P: Begin queueing installation of package lists (install pass)...
Reading package lists... Done
Building dependency tree... Done
Package dctrl-tools is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'dctrl-tools' has no installation candidate
E: An unexpected failure occurred, exiting...
P: Begin unmounting filesystems...
P: Saving caches...
Reading package lists... Done
Building dependency tree... Done
Traceback (most recent call last):
  File "/vyos/work/vyos-trixie/vyos-build/./build-vyos-image", line 692, in <module>
    cmd("lb build 2>&1")
    ~~~^^^^^^^^^^^^^^^^^
  File "/vyos/work/vyos-trixie/vyos-build/scripts/image-build/utils.py", line 84, in cmd
    raise OSError(f"Command '{command}' failed")
OSError: Command 'lb build 2>&1' failed
vyos_bld@039c315a3729:/vyos/work/vyos-trixie/vyos-build$ 

[sarthurdev]

Moved it a bit further, still issues:

he following packages have unmet dependencies:
 accel-ppp : Depends: libpcre3 (>= 8.39) but it is not installable
 ipaddrcheck : Depends: libpcre3 but it is not installable
 kmod : Breaks: bash-completion (< 1:2.16.0-1) but 1:2.8-6 is to be installed
 libsnmp40 : Depends: libpcre3 but it is not installable
 libsnmp40t64 : Breaks: libsnmp40 (< 5.9.4+dfsg-2)
 vyatta-cfg : Depends: libvyatta-cfg1 (>= 0.102.0+vyos2+current5) but it is not going to be installed
              Depends: unionfs-fuse but it is not installable
              Depends: libboost-filesystem1.74.0 but it is not installable

[sarthurdev]

Fixes still WIP:
vyatta-bash, vyatta-cfg, vyos-1x

[sever-sever]

SNMP should be removed there if we do not build it.

vyos-build/.github/workflows/trigger_rebuild_packages.yml

Lines 65 to 66 in 3222553

	net-snmp:
	- 'scripts/package-build/net-snmp/**'

vyos-build/.github/workflows/trigger_rebuild_packages.yml

Lines 194 to 196 in 3222553

	if [ "${{ steps.changes.outputs.net-snmp }}" == "true" ]; then
	trigger_build "net-snmp"
	fi

• addition unionfs-fuse to trigger re-build

[github-actions]

❌ Conflicts Found. This pull request has conflicts. Please resolve them before we can evaluate the pull request.

[github-actions]

✅ Conflicts Resolved. Conflicts have been resolved. A maintainer will review the pull request shortly.

[github-actions]

❌ Conflicts Found. This pull request has conflicts. Please resolve them before we can evaluate the pull request.

[github-actions]

✅ Conflicts Resolved. Conflicts have been resolved. A maintainer will review the pull request shortly.

[dmbaturin]

Administrative decision: we will upgrade to Trixie only after VyOS 1.5 LTS is released.

There are two motivations for it:

1. While @sarthurdev's work uncovered and fixed lot of known issues, the risk of unknown unknowns is difficult to estimate and it's better to handle it when we start working on the Trixie-based LTS branch (1.5 is Bookworm-based and will not benefit from that work).
2. The hard removal of DSA key support in OpenSSH can leave people locked out of their systems and needs to go through a deprecation procedure. Some could argue that it's not a big deal for rolling, but the procedure for handling incompatible changes still should be the same, especially with really serious things like login mechanisms.

Please convert the PR to a draft.

[dmbaturin]

The idea to upgrade to Trixie is on hold now, so I'm closing this PR series — not because they are bad, we'll reopen and merge them when we are ready to upgrade.