From f605be0d6c80a89894fdf38a8702be1b3fe08546 Mon Sep 17 00:00:00 2001 From: I515719 Date: Fri, 9 Oct 2026 11:21:54 +0800 Subject: [PATCH 1/4] fix(DM01-6326): update minio image to quay.io registry minio/minio on Docker Hub is no longer publicly accessible. Replace with quay.io/minio/minio to fix API test CI failures. --- infrabox/test/api/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infrabox/test/api/docker-compose.yml b/infrabox/test/api/docker-compose.yml index bf63e5239..4bfdafbda 100644 --- a/infrabox/test/api/docker-compose.yml +++ b/infrabox/test/api/docker-compose.yml @@ -7,7 +7,7 @@ services: dockerfile: ./src/postgres/Dockerfile minio: - image: minio/minio + image: quay.io/minio/minio command: server /data environment: - MINIO_ACCESS_KEY=AKIAIOSFODNN7EXAMPLE From 27cd3a4a5d5b5f0fcb5ea652f1fb6bdd5bfe3690 Mon Sep 17 00:00:00 2001 From: I515719 Date: Fri, 9 Oct 2026 15:02:06 +0800 Subject: [PATCH 2/4] fix(DM01-6326): build minio image from official binary instead of pulling from registry Both minio/minio (Docker Hub) and quay.io/minio/minio require authentication and are not publicly accessible. Build minio from the official dl.min.io binary download instead, following the same pattern as postgres and opa. --- infrabox/test/api/docker-compose.yml | 4 +++- infrabox/test/minio/Dockerfile | 8 ++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) create mode 100644 infrabox/test/minio/Dockerfile diff --git a/infrabox/test/api/docker-compose.yml b/infrabox/test/api/docker-compose.yml index 4bfdafbda..56e37e1ce 100644 --- a/infrabox/test/api/docker-compose.yml +++ b/infrabox/test/api/docker-compose.yml @@ -7,7 +7,9 @@ services: dockerfile: ./src/postgres/Dockerfile minio: - image: quay.io/minio/minio + build: + context: ../../../ + dockerfile: ./infrabox/test/minio/Dockerfile command: server /data environment: - MINIO_ACCESS_KEY=AKIAIOSFODNN7EXAMPLE diff --git a/infrabox/test/minio/Dockerfile b/infrabox/test/minio/Dockerfile new file mode 100644 index 000000000..f815681f7 --- /dev/null +++ b/infrabox/test/minio/Dockerfile @@ -0,0 +1,8 @@ +FROM debian:bullseye-slim +RUN apt-get update && apt-get install -y --no-install-recommends wget ca-certificates && \ + rm -rf /var/lib/apt/lists/* +RUN wget -q -O /usr/local/bin/minio \ + "https://dl.min.io/server/minio/release/linux-amd64/archive/minio.RELEASE.2022-11-08T05-27-07Z" && \ + chmod +x /usr/local/bin/minio +EXPOSE 9000 +ENTRYPOINT ["minio"] From bd72de061b11469d1223c19e9c280b7c84de295a Mon Sep 17 00:00:00 2001 From: I515719 Date: Fri, 9 Oct 2026 15:39:55 +0800 Subject: [PATCH 3/4] fix(DM01-6326): use debian:bookworm-slim in minio Dockerfile debian:bullseye is EOL, debian-security packages return 404. Switch to bookworm (Debian 12 LTS). --- infrabox/test/minio/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infrabox/test/minio/Dockerfile b/infrabox/test/minio/Dockerfile index f815681f7..7b5d4e9ae 100644 --- a/infrabox/test/minio/Dockerfile +++ b/infrabox/test/minio/Dockerfile @@ -1,4 +1,4 @@ -FROM debian:bullseye-slim +FROM debian:bookworm-slim RUN apt-get update && apt-get install -y --no-install-recommends wget ca-certificates && \ rm -rf /var/lib/apt/lists/* RUN wget -q -O /usr/local/bin/minio \ From 246b6abaa9d8f2668ed42ceed9fed2ec6bea437e Mon Sep 17 00:00:00 2001 From: I515719 Date: Fri, 9 Oct 2026 16:18:32 +0800 Subject: [PATCH 4/4] fix(DM01-6326): download minio from GitHub releases, update env vars dl.min.io is blocked by Cisco Umbrella in CI. Use GitHub releases instead. Update env vars from MINIO_ACCESS_KEY/SECRET_KEY to MINIO_ROOT_USER/ROOT_PASSWORD as required by minio >= RELEASE.2021-04-22. --- infrabox/test/api/docker-compose.yml | 4 ++-- infrabox/test/minio/Dockerfile | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/infrabox/test/api/docker-compose.yml b/infrabox/test/api/docker-compose.yml index 56e37e1ce..18c565b30 100644 --- a/infrabox/test/api/docker-compose.yml +++ b/infrabox/test/api/docker-compose.yml @@ -12,8 +12,8 @@ services: dockerfile: ./infrabox/test/minio/Dockerfile command: server /data environment: - - MINIO_ACCESS_KEY=AKIAIOSFODNN7EXAMPLE - - MINIO_SECRET_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY + - MINIO_ROOT_USER=AKIAIOSFODNN7EXAMPLE + - MINIO_ROOT_PASSWORD=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY opa: build: diff --git a/infrabox/test/minio/Dockerfile b/infrabox/test/minio/Dockerfile index 7b5d4e9ae..932fcaac2 100644 --- a/infrabox/test/minio/Dockerfile +++ b/infrabox/test/minio/Dockerfile @@ -1,8 +1,8 @@ FROM debian:bookworm-slim RUN apt-get update && apt-get install -y --no-install-recommends wget ca-certificates && \ rm -rf /var/lib/apt/lists/* -RUN wget -q -O /usr/local/bin/minio \ - "https://dl.min.io/server/minio/release/linux-amd64/archive/minio.RELEASE.2022-11-08T05-27-07Z" && \ +RUN wget -q --no-check-certificate -O /usr/local/bin/minio \ + "https://github.com/minio/minio/releases/download/RELEASE.2025-07-23T15-54-02Z/minio.linux-amd64.RELEASE.2025-07-23T15-54-02Z" && \ chmod +x /usr/local/bin/minio EXPOSE 9000 ENTRYPOINT ["minio"]