fix: preinstall provision tools in debian-based agent image

The provision service (scripts/e2e-provision.sh) ran `apk add
python3 openssl curl jq` on startup, but after the agent base moved
from Alpine to debian:slim there is no apk, so the script exited 127
with the error swallowed by the redirect.

Preinstall the tools via apt in the agent image (provision shares
this image) and make the script's package-install step conditional on
which package manager is present.

Author: Developer

Dockerfile

@@ -49,8 +49,11 @@ RUN npm run build
 # binlogs. ~150MB vs ~600MB for mysql:8.0 as the agent base.
 FROM debian:12-slim AS agent
 
+# python3/openssl/curl/jq are preinstalled for the provision service, which
+# shares this agent image (scripts/e2e-provision.sh uses them to register the
+# agent and issue its mTLS certificate).
 RUN apt-get update && apt-get install -y --no-install-recommends \
-        ca-certificates tzdata mariadb-client && \
+        ca-certificates tzdata mariadb-client python3 openssl curl jq && \
     rm -rf /var/lib/apt/lists/* && \
     ln -sf /usr/bin/mariadb-binlog /usr/bin/mysqlbinlog && \
     test -x /usr/bin/mysqlbinlog && \

scripts/e2e-provision.sh

@@ -11,7 +11,14 @@
 # ============================================================================
 set -e
 
-apk add --no-cache python3 openssl curl jq >/dev/null 2>&1
+# Provisioning tools are preinstalled in the agent image (debian base). Fall
+# back to installing them on the fly when this script runs on other bases.
+if command -v apk >/dev/null 2>&1; then
+  apk add --no-cache python3 openssl curl jq >/dev/null 2>&1 || true
+elif command -v apt-get >/dev/null 2>&1; then
+  apt-get update -qq >/dev/null 2>&1 && \
+    apt-get install -y -qq --no-install-recommends python3 openssl curl jq >/dev/null 2>&1 || true
+fi
 
 SERVER_URL="http://server:8080"
 DATA_DIR="/var/lib/mysql-pitr"