Getting Nginx deb packages from nginx.org

[chesnovskii]

Hi!
Could you please tell me if there is any way to get updates from the https://nginx.org/packages/debian repo?
I try to use repology data source, but it looks like I've got packages only from https://deb.debian.org/debian.

Dockerfile example

FROM debian:bullseye

# renovate: datasource=repology depName=debian_11/nginx versioning=loose
ENV NGINX_VERSION="1.20.2-1~bullseye"

RUN apt-get update && apt-get install -y --no-install-recommends \
    curl gnupg2 ca-certificates lsb-release debian-archive-keyring

RUN curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
    | tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null \
    && echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
    http://nginx.org/packages/debian `lsb_release -cs` nginx" \
    | tee /etc/apt/sources.list.d/nginx.list
    
RUN apt-get update && apt-get install -y --no-install-recommends \
    nginx=${NGINX_VERSION}* \
    && rm -rf /var/lib/apt/lists/*

renovate.json example

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:base"
  ],
  "regexManagers": [
    {
      "description": "Update _VERSION variables in Dockerfiles",
      "fileMatch": ["(^|/|\\.)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"],
      "matchStrings": [
        "#\\s*renovate:\\s*datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .*?_VERSION=\"?(?<currentValue>.*?)\"?\\s"
      ],
      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
    }
  ]
}

[viceice]

we don't have a deb datasource yet, so not possible yet

[mieliespoor]

Adding a datasource like this will really unlock docker files in CI environments. The point of Renovate pinning the docker digest is really moot when you consider that most of the packages installed in the Dockerfile is just pulling in the latest version on every build.

[rarkins]

Repology supports many

[kevin-kortum-trustedshops]

There is a datasource for debian now, but i still got issues with the nginx repository which i don't know is an issue with their repository (the official nginx not repology) or with renovate.

Running renovate 42.x in local docker gets me

DEBUG: No releaseTimestamp for nginx update to undefined (repository=local)
DEBUG: No currentVersionTimestamp for nginx (repository=local)

renovate.json

// ...
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^Dockerfile$/"
      ],
      "matchStrings": [
        "#\\s*renovate:\\s*?(suite=(?<suite>.*?))?\\s*depName=(?<depName>.*?)?\\sENV .*?_VERSION=\"(?<currentValue>.*)\""
      ],
      "registryUrlTemplate": "https://deb.debian.org/debian?suite={{#if suite }}{{suite}}{{else}}stable{{/if}}&components=main,contrib,non-free&binaryArch=amd64",
      "datasourceTemplate": "deb"
    }
  ],
  "packageRules": [
    {
      "matchDatasources": [
        "deb"
      ],
      "matchPackageNames": [
        "nginx"
      ],
      "registryUrls": [
        "http://nginx.org/packages/mainline/debian?suite=bookworm&components=nginx&binaryArch=amd64"
      ]
    }
  ]
// ...

Dockerfile

# ...

# renovate: suite=bookworm depName=nginx
ENV NGINX_VERSION="1.29.0-1~bookworm"

# ...