Would it be better to just get the service-dist.zip from archiva direct rather than using git-fat and the wikidata-query-deploy repo?

This would keep the images less dependent on what happens on production. It also would happily remove git-fat as a dependency.

We should be able to do this with something like: wget "https://archiva.wikimedia.org/archivaServices/searchService/artifact?r=snapshots&g=org.wikidata.query.rdf&a=service&v=LATEST"

although currently this 403s

Would it be better to just get the service-dist.zip from archiva direct rather than using git-fat and the wikidata-query-deploy repo?

Yes, but you need to know how to get the latest one.

After a little digging it seems that that search endpoint is locked down but the good news is that:

https://archiva.wikimedia.org/repository/snapshots/org/wikidata/query/rdf/service/0.3.0-SNAPSHOT/service-0.3.0-SNAPSHOT-dist.zip seems to always display the latest pushed SNAPSHOT version.

I diffed the extracted folder with the most recent one published in the list from https://archiva.wikimedia.org/#artifact-details-download-content/org.wikidata.query.rdf/service/0.3.0-SNAPSHOT and they are identical.

PR now available at: https://github.com/wmde/wikibase-docker/pull/28

Do we actually want to do this now then? Is 0.3.1 compatible with our wikibase version?

Created a 0.3.1 tag https://github.com/wmde/wikibase-docker/pull/37

Is there some kind of record showing which versions of the query service are compatible with which versions of the wdqs?

Not really. Since the interface is pretty much just RDF/TTL, any recent version should work (with the note that some of the versions of course may be missing some data which were added later). Unfortunately, I don't have a formal definition of "recent", except that if some combination from last year or so doesn't work it's most likely a bug and should be fixed.