MLE-33408: UBI libnsl dependency failure on UBI images

[vitalykorolev]

Description

Updates the UBI base images and the pinned libnsl RPMs in the dependency Dockerfiles so that libnsl matches the glibc that microdnf upgrade glibc installs from the UBI repositories.

Root cause: the libnsl RPM is pinned to a fixed version, and it must match the glibc UBI provides after microdnf upgrade glibc. The new UBI base images ship newer glibc builds, which no longer matched the libnsl pins and broke the UBI dependency image build.

Fix: bump the UBI base image tags and, for UBI8, the libnsl pin, so that each libnsl version matches the glibc in its base image.

Changes (dockerFiles only):

• dockerFiles/marklogic-deps-ubi:base
  • Base image ubi8/ubi-minimal 8.10-1787081751 -> 8.10-1791896186
  • libnsl (Rocky Linux) 2.28-251.el8_10.43 -> 2.28-251.el8_10.48
    (https://download.rockylinux.org/pub/rocky/8/BaseOS/x86_64/os/Packages/l/libnsl-2.28-251.el8_10.48.x86_64.rpm)
• dockerFiles/marklogic-deps-ubi9:base
  • Base image ubi9/ubi-minimal 9.8-1791279563 -> 9.8-1791898448
  • libnsl 2.34-283.el9_8 pin unchanged (matches the new UBI9 glibc)
• dockerFiles/marklogic-deps-ubi9-arm:base
  • Base image ubi9/ubi-minimal 9.8-1791279563 -> 9.8-1791898448
  • libnsl 2.34-283.el9_8 pin unchanged

glibc/libnsl versions after the change: UBI8 glibc 2.28-251.el8_10.48 with libnsl 2.28-251.el8_10.48; UBI9 glibc 2.34-283.el9_8 with libnsl 2.34-283.el9_8.

Validation:

• Local builds of ubi, ubi-rootless, ubi9 and ubi9-rootless succeeded with matching glibc and libnsl versions.
• ubi9-arm was not built locally.
• Jenkins builds on this branch are green.

Note: the UBI8 libnsl was briefly tested from AlmaLinux before Rocky Linux published the .48 build. The final branch uses Rocky Linux only.

Checklist:

• Owner:

• JIRA_ID as part of branch/PR name

• Rebase the branch with upstream

• Squashed all commits into a single commit

• Added Tests

• Reviewer:

• Reviewed Tests

• Added to Release Wiki/Jira

[Copilot]

🟢 Approval recommended

The pinned versions align with the upgraded glibc packages, and the UBI9 tag supports ARM64.

0 open findings

What changed in this PR

Updates UBI dependency images to keep pinned libnsl packages compatible with upgraded glibc versions.

Changes:

• Bumps UBI8 and UBI9 minimal base-image tags.
• Updates UBI8’s Rocky Linux libnsl pin to .48.
• Applies the UBI9 update to AMD64 and ARM64 variants.

File	Description
dockerFiles/​marklogic-deps-ubi:base	Updates UBI8 and its matching libnsl RPM.
dockerFiles/​marklogic-deps-ubi9:base	Updates the UBI9 base image.
dockerFiles/​marklogic-deps-ubi9-arm:base	Updates the ARM64 UBI9 base image.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.