Latest 9.0 docker image missing curl

[cvatterodt]

We are using the image tomcat:9.0 as a base image for a custom docker image. Inside our image, we are calling curl to download artifacts into the image. Recently the docker build for our image failed with the following exception:

The command '/bin/sh -c curl [...] returned a non-zero code: 127

I checked the image, which currently resolves to 9.0.109-jdk25-temurin-noble and it does indeed not have curl installed any more. The image tagged 9.0.108 still has curl. Am I correct in assuming this is an involuntary regression?

[yosifkit]

🤔 hmm, they stopped including curl in JDK 22 (adoptium/containers#630), but 25 is the next LTS since then. Since we only create tomcat images for LTS releases, this is the first one to see the change. Unsure if we should follow their change or add curl to the jdk25 images. Please, vote on the opening comment above to voice your support 👍 or disagreement 👎.

Edit: for clarification use 👍to add curl in the tomcat images; use👎to leaving curl not installed in the tomcat JDK 25+ images (following the Eclipse Temurin change).

If you need curl right now, then make swap back to jdk21 images; be sure to pin your JDK version, variant, and OS version to minimize possible breaking changes: e.g. tomcat:9.0-jdk21-temurin-noble. Or install curl in your dependent image (it'll become a no op if we add it back).

Edit: see also adoptium/containers#814

[gaeljw]

Please, vote on the opening comment above to voice your support 👍 or disagreement 👎.

Sorry but I'm not sure how this should be interpreted: 👍 to add curl in Tomcat, 👎 to be aligned with Eclipse Temurin?

I didn't yet get a definitive answer from Eclipse Temurin folks, maybe this will be added back anyways 🤷

[yosifkit]

Sorry but I'm not sure how this should be interpreted: 👍 to add curl in Tomcat, 👎 to be aligned with Eclipse Temurin?

Yes, that is what I meant. Sorry that I was unclear.

[tianon]

I think we should keep curl out of the images -- it's not necessary for Tomcat itself, so it doesn't belong in the images (but we shouldn't go out of our way if the base image makes a different choice, as before).

[thaarbach]

I think we should keep curl out of the images -- it's not necessary for Tomcat itself, so it doesn't belong in the images (but we shouldn't go out of our way if the base image makes a different choice, as before).

I think it's need to perfom health check if an application provides health-check endpoints.