chore: switch the image to Python 3.14 on Debian 13 (trixie) (#44)

The published image carried an outdated CA store and rejected certificates chaining to newer public roots. torch goes to 2.9.1, which has Python 3.14 wheels and still uses CUDA 12.8 and ROCm 6.4. CI now tests against AppAPI main and deploys the image built from the checkout.

Signed-off-by: Oleksandr Piskun <oleksandr2088@icloud.com>

Author: oleksandr-nc

.github/workflows/test-deploy.yml

@@ -43,6 +43,13 @@ jobs:
           repository: nextcloud/server
           ref: master
 
+      - name: Checkout AppAPI
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        with:
+          path: apps/app_api
+          repository: nextcloud/app_api
+          ref: main
+
       - name: Checkout Test Deploy
         uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
@@ -72,10 +79,18 @@ jobs:
           ./occ config:system:set debug --value=true --type=boolean
           ./occ app:enable --force app_api
 
+      - name: Build image
+        run: |
+          IMAGE="$(php -r '$d = simplexml_load_file($argv[1])->{"external-app"}->{"docker-install"}; echo $d->registry . "/" . $d->image . ":" . $d->{"image-tag"};' apps/${{ env.APP_NAME }}/appinfo/info.xml)"
+          echo "Building $IMAGE"
+          docker build --build-arg BUILD_TYPE=cpu -t "$IMAGE" apps/${{ env.APP_NAME }}
+
       - name: Test deploy
         run: |
           PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 &
           ./occ app_api:daemon:register docker_local_sock Docker docker-install http /var/run/docker.sock http://127.0.0.1:8080/index.php
+          # Deploy the image built above instead of pulling the published one
+          ./occ app_api:daemon:registry:add docker_local_sock --registry-from ghcr.io --registry-to local
           ./occ app_api:app:register ${{ env.APP_NAME }} docker_local_sock \
             --info-xml apps/${{ env.APP_NAME }}/appinfo/info.xml
           ./occ app_api:app:enable ${{ env.APP_NAME }}
@@ -89,11 +104,10 @@ jobs:
 
       - name: Check logs
         run: |
-          grep -q 'Started' container.log || error
-          grep -q 'Connect to Nextcloud was successful' container.log || error
-          grep -q 'enabled_handler: enabled=True' container.log || error
-          grep -q 'enabled_handler: enabled=False' container.log || error
-          grep -q 'Running on CPU' container.log || error
+          for expected in 'Started' 'Connect to Nextcloud was successful' \
+            'enabled_handler: enabled=True' 'enabled_handler: enabled=False' 'Running on CPU'; do
+            grep -q "$expected" container.log || { echo "::error::Not found in the container log: $expected"; exit 1; }
+          done
 
       - name: Unregister App & Daemon
         run: |

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/python:3.12-slim-bookworm AS builder
+FROM docker.io/python:3.14-slim-trixie AS builder
 
 RUN apt-get update && apt-get install -y curl && \
     apt-get clean && rm -rf /var/lib/apt/lists/*
@@ -42,19 +42,19 @@ RUN --mount=type=cache,target=/root/.cache/pip \
     ARCH=$(uname -m) && \
     if [ "$ARCH" = "aarch64" ]; then \
         echo "Installing PyTorch for ARM64"; \
-        python3 -m pip install --root-user-action=ignore torch==2.8.0 torchvision; \
+        python3 -m pip install --root-user-action=ignore torch==2.9.1 torchvision; \
     elif [ "$BUILD_TYPE" = "rocm" ]; then \
-        python3 -m pip install --root-user-action=ignore torch==2.8.0 torchvision --index-url https://download.pytorch.org/whl/rocm6.4; \
+        python3 -m pip install --root-user-action=ignore torch==2.9.1 torchvision --index-url https://download.pytorch.org/whl/rocm6.4; \
     elif [ "$BUILD_TYPE" = "cpu" ]; then \
-        python3 -m pip install --root-user-action=ignore torch==2.8.0 torchvision --index-url https://download.pytorch.org/whl/cpu; \
+        python3 -m pip install --root-user-action=ignore torch==2.9.1 torchvision --index-url https://download.pytorch.org/whl/cpu; \
     else \
-        python3 -m pip install --root-user-action=ignore torch==2.8.0 torchvision; \
+        python3 -m pip install --root-user-action=ignore torch==2.9.1 torchvision; \
     fi
 
 RUN --mount=type=cache,target=/root/.cache/pip \
     python3 -m pip install --root-user-action=ignore -r requirements.txt && rm requirements.txt
 
-FROM python:3.12-slim-bookworm
+FROM python:3.14-slim-trixie
 
 COPY --from=builder /usr/local/ /usr/local/