I chatted with @MoritzMuehlenhoff about this today (thanks Moritz).

Backporting the forky rustc to bookworm would be a pain, and we also don't need to do it. Instead, we can:

• Upgrade abstractwiki-rust-web to be based on trixie instead of bookworm. (Not forky; we don't run Debian testing in prod.)
• Install rustc from trixie-backports, which also gets us to 1.94.
  • To do that, write a patch that's basically the opposite of https://gerrit.wikimedia.org/r/1131631 -- i.e. create the .list and .pref files and insert the matching ADD lines in the dockerfile.
  • In addition to saying trixie-backports instead of bullseye-backports throughout, you should also say https://deb.debian.org/debian instead of https://mirrors.wikimedia.org/debian, which will be going away soon.

This should be a lot less work than T425341 would be.

Per discussion in T380807 I'm leaving it for the Abstract Wikipedia team to manage that upgrade, but happy to do the parts that require root and +2 in production-images, and let me know if you have any questions (or Moritz has offered to answer them on-task, too).

Change #1289012 had a related patch set uploaded (by Jforrester; author: Jforrester):

[operations/docker-images/production-images@master] Provide abstractwiki-rust, using Trixie-backports

https://gerrit.wikimedia.org/r/1289012

In T425340#11932809, @RLazarus wrote:

I chatted with @MoritzMuehlenhoff about this today (thanks Moritz).

Backporting the forky rustc to bookworm would be a pain, and we also don't need to do it. Instead, we can:

• Upgrade abstractwiki-rust-web to be based on trixie instead of bookworm. (Not forky; we don't run Debian testing in prod.)
• Install rustc from trixie-backports, which also gets us to 1.94.
  • To do that, write a patch that's basically the opposite of https://gerrit.wikimedia.org/r/1131631 -- i.e. create the .list and .pref files and insert the matching ADD lines in the dockerfile.
  • In addition to saying trixie-backports instead of bullseye-backports throughout, you should also say https://deb.debian.org/debian instead of https://mirrors.wikimedia.org/debian, which will be going away soon.

This should be a lot less work than T425341 would be.

Per discussion in T380807 I'm leaving it for the Abstract Wikipedia team to manage that upgrade, but happy to do the parts that require root and +2 in production-images, and let me know if you have any questions (or Moritz has offered to answer them on-task, too).

This sounds like great approach, thanks for the advice. Patch pushed.

Change #1289012 merged by Muehlenhoff:

[operations/docker-images/production-images@master] Provide abstractwiki-rust, using Trixie-backports

https://gerrit.wikimedia.org/r/1289012

Built and published:

rzl@build2001:/srv/images/production-images$ sudo build-production-images --select '*/abstractwiki-rust:*'
[...]
== Step 1: building images ==
* Built image docker-registry.discovery.wmnet/abstractwiki-rust:1.94.1
== Step 2: publishing ==
Successfully published image docker-registry.discovery.wmnet/abstractwiki-rust:1.94.1
[...]

jforrester opened https://gitlab.wikimedia.org/repos/abstract-wiki/wikifunctions/function-evaluator/-/merge_requests/543

build: Bump Rust base image to abstractwiki-rust (rustc 1.94)

dmartin merged https://gitlab.wikimedia.org/repos/abstract-wiki/wikifunctions/function-evaluator/-/merge_requests/543

build: Bump Rust base image to abstractwiki-rust (rustc 1.94)

Change #1296681 had a related patch set uploaded (by Jforrester; author: Jforrester):

[operations/docker-images/production-images@master] Drop the abstractwiki-rust-web images, no longer used

https://gerrit.wikimedia.org/r/1296681

Change #1296681 merged by RLazarus:

[operations/docker-images/production-images@master] Drop the abstractwiki-rust-web images, no longer used

https://gerrit.wikimedia.org/r/1296681