base images: restrict proxy to deb.debian.org
What
This MR restricts the APT proxy configuration in the Debian base image to only apply to deb.debian.org instead of all HTTP traffic. The change modifies the APT proxy configuration from a global HTTP proxy to a domain-specific proxy for official Debian package repositories.
File changed: images/base-images/Dockerfile.debian
Change: Modified the APT proxy configuration line from:
Acquire::http::Proxy "$APT_PROXY";
to:
Acquire::http::Proxy::deb.debian.org "$APT_PROXY";
Notice that for the moment these images are not used.
There is part of a stack of MR:
- !18741 (merged) remove duplicate test in packages
- !18426 add apk base image
- !18727 optional artifacts
- !18762 (merged) restrict proxy to deb.debian.org
The MR ( draft ) that put everything together !18762 (merged) ( this is still very much WIP )
Why
The previous configuration applied the proxy to all HTTP requests made by APT, which could potentially route non-Debian traffic through the proxy.
This change ensures the proxy is configured specifically one domain rather than as a catch-all HTTP proxy.
To add a new domain, we can modify the configuration file and also configure the proxy accordingly.