docker

Shared base images for downstream Java runtime images.

debian/Dockerfile tracks the current Debian stable release with debian:trixie-slim. This keeps the image on Debian 13 while avoiding the unexpected major-release jumps of stable-slim or latest.

The image intentionally installs only the runtime packages needed by the downstream Java images:

• ca-certificates
• fontconfig
• libfontconfig1
• openssl
• tzdata

Rebuild with a fresh upstream base and package metadata:

docker build --pull --no-cache -f debian/Dockerfile -t buzzxu/docker:debian .

For stricter supply-chain auditability, pin the base image by digest and update that digest through automation.