ci: harden debian container package installation and pip bootstrapping against stale apt mirror lists

2026-09-25 22:27:50 +02:00
parent d9d895e468
commit f7584320f9
2 changed files with 28 additions and 6 deletions
@@ -23,11 +23,22 @@ jobs:
      - name: Install System Dependencies & Python
        run: |
          if command -v apt-get >/dev/null 2>&1; then
-            apt-get update -y
-            apt-get install -y python3 python3-pip python3-venv curl
+            export DEBIAN_FRONTEND=noninteractive
+            if [ -f /etc/apt/sources.list ]; then
+              sed -i 's|deb.debian.org/debian-security bullseye-security|security.debian.org/debian-security bullseye-security|g' /etc/apt/sources.list 2>/dev/null || true
+            fi
+            rm -rf /var/lib/apt/lists/*
+            apt-get update -y || apt-get update --fix-missing -y || true
+            apt-get install -y --no-install-recommends python3 python3-pip python3-venv curl || apt-get install -y --fix-missing python3 python3-pip python3-venv curl || true
+          fi
+          if ! command -v pip3 >/dev/null 2>&1 && ! python3 -m pip --version >/dev/null 2>&1; then
+            if command -v curl >/dev/null 2>&1; then
+              curl -sS https://bootstrap.pypa.io/get-pip.py | python3 || true
+            fi
          fi
          python3 -m pip install --upgrade pip --break-system-packages || python3 -m pip install --upgrade pip || true
-          pip3 install -r compilation/requirements.txt --break-system-packages || pip3 install -r compilation/requirements.txt
+          python3 -m pip install -r compilation/requirements.txt --break-system-packages || python3 -m pip install -r compilation/requirements.txt || pip3 install -r compilation/requirements.txt
+

      - name: Verify Python Syntax
        run: |