Merge pull request #3620 from SUSE/for-deploy-16.1

alexandrevicenzi · web-flow · commit 7bc1a446b370 · 2026-03-26T16:20:55.000+01:00
🤖: Update build recipes for 16.1
diff --git a/389-ds-image/389-ds-image.changes b/389-ds-image/389-ds-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 24 09:00:28 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/389-ds-image/Dockerfile b/389-ds-image/Dockerfile
@@ -34,6 +34,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -46,6 +48,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.389-ds
 LABEL org.opencontainers.image.authors="william.brown@suse.com"
diff --git a/bind-image/Dockerfile b/bind-image/Dockerfile
@@ -42,6 +42,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -54,6 +56,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.bind
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/bind-image/bind-image.changes b/bind-image/bind-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/busybox-image/Dockerfile b/busybox-image/Dockerfile
@@ -29,6 +29,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -41,6 +43,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM scratch
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.bci.busybox
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/busybox-image/busybox-image.changes b/busybox-image/busybox-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/cosign-image/Dockerfile b/cosign-image/Dockerfile
@@ -35,6 +35,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -47,6 +49,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.cosign
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/cosign-image/cosign-image.changes b/cosign-image/cosign-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/distribution-image/Dockerfile b/distribution-image/Dockerfile
@@ -34,6 +34,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -46,6 +48,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.registry
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/distribution-image/distribution-image.changes b/distribution-image/distribution-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/git-image/Dockerfile b/git-image/Dockerfile
@@ -35,6 +35,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -47,6 +49,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.git
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/git-image/git-image.changes b/git-image/git-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Mon Mar 16 13:30:53 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/helm-image/Dockerfile b/helm-image/Dockerfile
@@ -35,6 +35,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -47,6 +49,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.helm
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/helm-image/helm-image.changes b/helm-image/helm-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/kea-image/Dockerfile b/kea-image/Dockerfile
@@ -33,6 +33,8 @@ RUN set -euo pipefail; zypper -n install --no-recommends systemd && \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -45,6 +47,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.kea
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/kea-image/kea-image.changes b/kea-image/kea-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/kiosk-firefox-esr-image/Dockerfile b/kiosk-firefox-esr-image/Dockerfile
@@ -34,6 +34,8 @@ RUN set -euo pipefail; chown -R user:user /home/user/.mozilla
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -46,6 +48,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.firefox-esr
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/kiosk-firefox-esr-image/kiosk-firefox-esr-image.changes b/kiosk-firefox-esr-image/kiosk-firefox-esr-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/micro-fips-image/Dockerfile b/micro-fips-image/Dockerfile
@@ -33,6 +33,8 @@ RUN set -euo pipefail; zypper -n install jdupes crypto-policies-scripts update-b
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -45,6 +47,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM scratch
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.bci.micro-fips
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/micro-fips-image/micro-fips-image.changes b/micro-fips-image/micro-fips-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/micro-image/Dockerfile b/micro-image/Dockerfile
@@ -32,6 +32,8 @@ RUN set -euo pipefail; zypper -n install jdupes \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -44,6 +46,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM scratch
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.bci.micro
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/micro-image/micro-image.changes b/micro-image/micro-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Tue Mar 10 21:55:17 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/nginx-image/Dockerfile b/nginx-image/Dockerfile
@@ -33,6 +33,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -45,6 +47,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.nginx
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/nginx-image/nginx-image.changes b/nginx-image/nginx-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Mon Mar 23 14:42:41 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/postgres-16-image/Dockerfile.contrib b/postgres-16-image/Dockerfile.contrib
@@ -32,6 +32,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -44,6 +46,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.postgres
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/postgres-16-image/Dockerfile.default b/postgres-16-image/Dockerfile.default
@@ -32,6 +32,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -44,6 +46,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.postgres
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/postgres-16-image/postgres-16-image.changes b/postgres-16-image/postgres-16-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Mar 26 15:09:22 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
+
+- rebuild rpm database to make it reproducible
+
 -------------------------------------------------------------------
 Mon Mar 16 21:01:29 UTC 2026 - SUSE Update Bot <bci-internal@suse.de>
 
diff --git a/postgres-17-image/Dockerfile.contrib b/postgres-17-image/Dockerfile.contrib
@@ -32,6 +32,8 @@ RUN set -euo pipefail; \
 
 # cleanup logs and temporary files
 RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
+    t=$(mktemp -d); mv /target/usr/lib/sysimage/rpm/Packages.db $t; rpmdb --rebuilddb --dbpath=$t; \
+    rm /target/usr/lib/sysimage/rpm/*.db && mv $t/Packages.db /target/usr/lib/sysimage/rpm/; \
     rm -rf {/target,}/var/log/{alternatives.log,lastlog,tallylog,zypper.log,zypp/history,YaST2}; \
     rm -rf {/target,}/run/*; \
     rm -f {/target,}/etc/{shadow-,group-,passwd-,.pwd.lock}; \
@@ -44,6 +46,7 @@ RUN set -euo pipefail; zypper -n --installroot /target clean -a; \
 RUN set -euo pipefail; sed -i 's/^\([^:]*:[^:]*:\)[^:]*\(:.*\)$/\1\2/' /target/etc/shadow
 FROM bci/bci-micro:16.1
 COPY --from=builder /target /
+RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=com.suse.application.postgres
 LABEL org.opencontainers.image.authors="https://github.com/SUSE/bci/discussions"
diff --git a/postgres-17-image/Dockerfile.default b/postgres-17-image/Dockerfile.default
diff --git a/postgres-17-image/postgres-17-image.changes b/postgres-17-image/postgres-17-image.changes
diff --git a/postgres-18-image/Dockerfile.contrib b/postgres-18-image/Dockerfile.contrib
diff --git a/postgres-18-image/Dockerfile.default b/postgres-18-image/Dockerfile.default
diff --git a/postgres-18-image/postgres-18-image.changes b/postgres-18-image/postgres-18-image.changes
diff --git a/prometheus-image/Dockerfile b/prometheus-image/Dockerfile
diff --git a/prometheus-image/prometheus-image.changes b/prometheus-image/prometheus-image.changes
diff --git a/pulseaudio-image/Dockerfile b/pulseaudio-image/Dockerfile
diff --git a/pulseaudio-image/pulseaudio-image.changes b/pulseaudio-image/pulseaudio-image.changes
diff --git a/stunnel-image/Dockerfile b/stunnel-image/Dockerfile
diff --git a/stunnel-image/stunnel-image.changes b/stunnel-image/stunnel-image.changes
diff --git a/valkey-image/Dockerfile b/valkey-image/Dockerfile
diff --git a/valkey-image/valkey-image.changes b/valkey-image/valkey-image.changes
