Jason Woltje fb609d40e3 fix: use Kaniko --snapshot-mode=redo to fix apt GPG errors in CI ...

Kaniko's default full-filesystem snapshots corrupt GPG verification
state, causing "invalid signature" errors during apt-get update on
Debian bookworm (node:24-slim). Using --snapshot-mode=redo avoids
this by recalculating layer diffs instead of taking full snapshots.

Also keeps the rm -rf /var/lib/apt/lists/* guard in Dockerfiles as
a defense-in-depth measure against stale base-image APT metadata.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 19:56:34 -06:00

5.1 KiB

Raw Blame History

View Raw