Repository navigation
chore: mirror library/python 3.13.12-slim-trixie - #36
Merged
Merged
Conversation
snuba CI builds FROM python:3.13.12-slim-trixie and is getting 429s from anonymous Docker Hub pulls on shared GitHub-hosted runner IPs. Co-Authored-By: Joshua Li <14209781+joshuarli@users.noreply.github.com>
mchen-sentry
approved these changes
Oct 9, 2026
ElioDiNino
added a commit
to getsentry/snuba
that referenced
this pull request
Oct 9, 2026
Switch the `build_base` stage from Docker Hub's
`python:${PYTHON_VERSION}-slim-trixie` to
`ghcr.io/getsentry/image-mirror-library-python:${PYTHON_VERSION}-slim-trixie`.
**Why:** CI's `Build snuba CI image` step pulls from Docker Hub without
logging in, so GitHub-hosted runners have been hitting anonymous rate
limits:
```
unexpected status from HEAD request to https://registry-1.docker.io/v2/library/python/manifests/3.13.12-slim-trixie: 429 Too Many Requests
```
([example](https://github.com/getsentry/snuba/actions/runs/37989903215/job/114021512646?pr=8533)).
This blocks every PR while it happens. CI already uses `image-mirror`
for ClickHouse, Kafka, and Zookeeper.
**Depends on** getsentry/image-mirror#36, which is merged. Its sync run
on `main` was still in progress when I opened this. Re-run CI once the
GHCR tag exists and is publicly pullable.
**Notes**
- The mirror publishes amd64 + arm64, which matches the platforms
`image.yml` builds.
- The existing GHCR `image-mirror-*` packages pull anonymously. The new
package should do the same, but that's worth confirming after the first
sync.
- The runtime stages (`application`, `application-debug`) already use
the `dhi-mirror` and aren't touched here.
- Going forward, bumping `PYTHON_VERSION` means mirroring the new tag in
`image-mirror` first. I added a comment in the Dockerfile saying so.
<!-- junior-request-attribution:start -->
via @joshuarli.
<!-- junior-request-attribution:end -->
<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3ACTJL7358X%3A1791579377.495359 -->
--
[View Junior
Session](https://junior-prod.sentry.dev/conversations/slack%3ACTJL7358X%3A1791579377.495359)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3ACTJL7358X%3A1791579377.495359/?project=4510944073809921)
<!-- junior-session-footer:end -->
---------
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Joshua Li <14209781+joshuarli@users.noreply.github.com>
Co-authored-by: Elio Di Nino <52972357+ElioDiNino@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
snuba CI builds FROM python:3.13.12-slim-trixie and is getting 429s from anonymous Docker Hub pulls on shared GitHub-hosted runner IPs.