Migrate to Debian bookworm

eloquence commented 2 months ago

Status

Ready for review

Description of Changes

Mostly authored by @legoktm.

Install poetry from Debian packages
Build deployment content in a Debian container instead of Python. This shouldn't make much of a difference except that we'll also get security updates of Python itself from Debian instead of needing to bump the image (which we haven't really been doing).
Bump the nginx alpine image to latest.
Update dependencies.

Refs #567.

Testing deployment

You can test the deploy container with:

podman build -t sddocs -f deploy/Dockerfile 
podman run --rm -p 127.0.0.1:8080:5080 sddocs

The docs site should be accessible on port 8080.

Checklist (Optional)

[x] Doc linting (make docs-lint) passed locally
[ ] Doc link linting (make docs-linkcheck) passed
[x] You have previewed (make docs) docs at http://localhost:8000

eloquence commented 2 months ago

The bulk of this PR was authored by Kunal; I've done a Poetry lockfile update and the pyproject.toml update to finish things up. I've reviewed and approve Kunal's portions of the PR; the same essential changes have been separately reviewed by Cory in https://github.com/freedomofpress/securedrop-dev-docs/pull/164.

eloquence commented 2 months ago

https://github.com/freedomofpress/securedrop-workstation-docs/pull/220 migrates SDW docs. https://github.com/freedomofpress/securedrop-dev-docs/pull/169 updates SD dev docs reusable workflows.

(Both will fail CI until this change lands.)

freedomofpress / securedrop-docs