From 7aeefa70965d1c4e78c1f02b947dcb713703bf59 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Tue, 15 Oct 2024 11:25:28 +0200
Subject: [PATCH 01/13] Bookworm: first draft

---
 3.5/bookworm/Dockerfile | 93 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 93 insertions(+)
 create mode 100644 3.5/bookworm/Dockerfile

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
new file mode 100644
index 0000000..e436d2e
--- /dev/null
+++ b/3.5/bookworm/Dockerfile
@@ -0,0 +1,93 @@
+# Base ##################################################################
+FROM debian:bookworm AS debian-minimal
+ARG PANDOC=3.5
+ARG LUA=5.4
+
+LABEL maintainer='Albert Krewinkel <albert+pandoc@zeitkraut.de>'
+LABEL org.pandoc.maintainer='Albert Krewinkel <albert+pandoc@zeitkraut.de>'
+LABEL org.pandoc.author "John MacFarlane"
+LABEL org.pandoc.version "$pandoc_version"
+
+# Install runtime dependencies
+RUN <<EOF
+set -eux
+apt-get -q --no-allow-insecure-repositories update
+DEBIAN_FRONTEND=noninteractive \
+apt-get install --assume-yes --no-install-recommends \
+    ca-certificates \
+    liblua$LUA-0 \
+    libatomic1 \
+    libgmp10 \
+    libpcre3 \
+    libyaml-0-2 \
+    zlib1g
+rm -rf /var/lib/apt/lists/*
+EOF
+
+RUN <<EOF
+set -eux
+cd /tmp
+apt-get -q --no-allow-insecure-repositories update
+# Install build dependencies
+DEBIAN_FRONTEND=noninteractive \
+apt-get install --assume-yes --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    cabal-install \
+    curl \
+    fakeroot \
+    git \
+    ghc \
+    libgmp-dev \
+    liblua$LUA-dev \
+    pkg-config \
+    zlib1g-dev
+EOF
+
+RUN <<EOF
+set -eux; \
+# Get pandoc-cli sources
+cabal update
+cabal get pandoc-cli-${PANDOC}
+cd pandoc-cli-${PANDOC}
+
+# Setup to include pandoc-crossref
+printf 'packages: pandoc-cli.cabal\n' > cabal.project
+# Add pandoc-crossref to project
+printf 'extra-packages: pandoc-crossref\n' >> cabal.project
+cat cabal.project
+EOF
+
+RUN <<EOF
+set -eux
+cd pandoc-cli-${PANDOC}
+# Build and install
+cabal install pandoc-cli:exes pandoc-crossref:exes \
+    --jobs \
+    --disable-tests \
+    --disable-bench \
+    --allow-newer='lib:pandoc' \
+    --prefix=/usr \
+    --docdir=/usr/share/doc/pandoc \
+    --flags='+server +lua' \
+    --sysconfdir=/etc \
+    --ghc-options='-O1 -optc-Os -optl=-pthread -fPIC -j +RTS -A128m -n2m -RTS'
+
+EOF
+
+RUN <<EOF
+set -eux
+cd pandoc-cli-${PANDOC}
+cabal list-bin pandoc-cli:exes | xargs install -Dm755 -t /usr/bin
+# 
+find /root/.cabal \
+    -name 'pandoc*' -type f -perm -u+x \
+    -exec strip '{}' ';' \
+    -exec cp '{}' /usr/local/bin/ ';'
+
+# cd /
+# ls -l -d /root/.*
+# rm -rf /root/.cabal /root/.ghc
+# rm -rf /tmp/*
+# rm -rf /var/lib/apt/lists/*
+EOF

From 8a114173edd4cccdc9843071b6eb5e1f1bbccc1f Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Tue, 15 Oct 2024 11:38:38 +0200
Subject: [PATCH 02/13] Use cabal install

---
 3.5/bookworm/Dockerfile | 38 +++++---------------------------------
 1 file changed, 5 insertions(+), 33 deletions(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index e436d2e..82509fa 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -44,50 +44,22 @@ apt-get install --assume-yes --no-install-recommends \
     zlib1g-dev
 EOF
 
-RUN <<EOF
-set -eux; \
-# Get pandoc-cli sources
-cabal update
-cabal get pandoc-cli-${PANDOC}
-cd pandoc-cli-${PANDOC}
-
-# Setup to include pandoc-crossref
-printf 'packages: pandoc-cli.cabal\n' > cabal.project
-# Add pandoc-crossref to project
-printf 'extra-packages: pandoc-crossref\n' >> cabal.project
-cat cabal.project
-EOF
-
-RUN <<EOF
-set -eux
-cd pandoc-cli-${PANDOC}
 # Build and install
-cabal install pandoc-cli:exes pandoc-crossref:exes \
+RUN cabal update
+RUN cabal install pandoc-cli pandoc-crossref \
     --jobs \
     --disable-tests \
     --disable-bench \
+    --install-method=copy \
     --allow-newer='lib:pandoc' \
-    --prefix=/usr \
-    --docdir=/usr/share/doc/pandoc \
+    --prefix=/usr/local \
+    --docdir=/usr/local/share/doc/pandoc \
     --flags='+server +lua' \
     --sysconfdir=/etc \
     --ghc-options='-O1 -optc-Os -optl=-pthread -fPIC -j +RTS -A128m -n2m -RTS'
 
-EOF
-
-RUN <<EOF
-set -eux
-cd pandoc-cli-${PANDOC}
-cabal list-bin pandoc-cli:exes | xargs install -Dm755 -t /usr/bin
-# 
-find /root/.cabal \
-    -name 'pandoc*' -type f -perm -u+x \
-    -exec strip '{}' ';' \
-    -exec cp '{}' /usr/local/bin/ ';'
-
 # cd /
 # ls -l -d /root/.*
 # rm -rf /root/.cabal /root/.ghc
 # rm -rf /tmp/*
 # rm -rf /var/lib/apt/lists/*
-EOF

From 62d5914d684ca51344ba719c24726c5cc595aa2f Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 12:13:44 +0200
Subject: [PATCH 03/13] Do everything in one RUN

---
 3.5/bookworm/Dockerfile | 397 +++++++++++++++++++++++++++++++++++++---
 1 file changed, 369 insertions(+), 28 deletions(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index 82509fa..67328f4 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -24,42 +24,383 @@ apt-get install --assume-yes --no-install-recommends \
 rm -rf /var/lib/apt/lists/*
 EOF
 
-RUN <<EOF
-set -eux
-cd /tmp
-apt-get -q --no-allow-insecure-repositories update
+RUN set -eux; \
+    manually_installed="$(apt-mark showmanual)"; \
+    apt-get -q --no-allow-insecure-repositories update; \
 # Install build dependencies
-DEBIAN_FRONTEND=noninteractive \
-apt-get install --assume-yes --no-install-recommends \
-    build-essential \
-    ca-certificates \
-    cabal-install \
-    curl \
-    fakeroot \
-    git \
-    ghc \
-    libgmp-dev \
-    liblua$LUA-dev \
-    pkg-config \
-    zlib1g-dev
-EOF
-
+    DEBIAN_FRONTEND=noninteractive \
+    apt-get install --assume-yes --no-install-recommends \
+        build-essential \
+        ca-certificates \
+        cabal-install \
+        curl \
+        fakeroot \
+        git \
+        ghc \
+        libgmp-dev \
+        liblua$LUA-dev \
+        pkg-config \
+        zlib1g-dev \
+    ;\
+    rm -rf /var/lib/apt/lists/*; \
 # Build and install
-RUN cabal update
-RUN cabal install pandoc-cli pandoc-crossref \
+    cabal update; \
+    cabal install pandoc-cli pandoc-crossref \
     --jobs \
     --disable-tests \
     --disable-bench \
     --install-method=copy \
+    --enable-split-sections \
+    --enable-executable-stripping \
     --allow-newer='lib:pandoc' \
+    --installdir=/usr/local/bin \
     --prefix=/usr/local \
-    --docdir=/usr/local/share/doc/pandoc \
     --flags='+server +lua' \
     --sysconfdir=/etc \
-    --ghc-options='-O1 -optc-Os -optl=-pthread -fPIC -j +RTS -A128m -n2m -RTS'
+    --ghc-options='-O1 -optc-Os -optl=-pthread -fPIC -j +RTS -A128m -n2m -RTS' \
+    --constraint='any.Cabal ==3.4.1.0' \
+    --constraint='any.Glob ==0.10.2' \
+    --constraint='any.HUnit ==1.6.2.0' \
+    --constraint='any.JuicyPixels ==3.3.9' \
+    --constraint='JuicyPixels -mmap' \
+    --constraint='any.OneTuple ==0.4.2' \
+    --constraint='any.Only ==0.1' \
+    --constraint='any.QuickCheck ==2.15.0.1' \
+    --constraint='QuickCheck -old-random +templatehaskell' \
+    --constraint='any.StateVar ==1.2.2' \
+    --constraint='any.aeson ==2.2.3.0' \
+    --constraint='aeson +ordered-keymap' \
+    --constraint='any.aeson-pretty ==0.8.10' \
+    --constraint='aeson-pretty +lib-only' \
+    --constraint='any.alex ==3.5.1.0' \
+    --constraint='any.ansi-terminal ==1.1.1' \
+    --constraint='ansi-terminal -example' \
+    --constraint='any.ansi-terminal-types ==1.1' \
+    --constraint='any.appar ==0.1.8' \
+    --constraint='any.array ==0.5.4.0' \
+    --constraint='any.asn1-encoding ==0.9.6' \
+    --constraint='any.asn1-parse ==0.9.5' \
+    --constraint='any.asn1-types ==0.3.4' \
+    --constraint='any.assoc ==1.1.1' \
+    --constraint='assoc -tagged' \
+    --constraint='any.async ==2.2.5' \
+    --constraint='async -bench' \
+    --constraint='any.attoparsec ==0.14.4' \
+    --constraint='attoparsec -developer' \
+    --constraint='any.auto-update ==0.2.1' \
+    --constraint='any.base ==4.15.1.0' \
+    --constraint='any.base-compat ==0.14.0' \
+    --constraint='any.base-orphans ==0.9.2' \
+    --constraint='any.base-unicode-symbols ==0.2.4.2' \
+    --constraint='base-unicode-symbols +base-4-8 -old-base' \
+    --constraint='any.base16-bytestring ==1.0.2.0' \
+    --constraint='any.base64-bytestring ==1.2.1.0' \
+    --constraint='any.basement ==0.0.16' \
+    --constraint='any.bifunctors ==5.6.2' \
+    --constraint='bifunctors +tagged' \
+    --constraint='any.binary ==0.8.8.0 || ==0.8.9.2' \
+    --constraint='any.bitvec ==1.1.5.0' \
+    --constraint='bitvec +simd' \
+    --constraint='any.blaze-builder ==0.4.2.3' \
+    --constraint='any.blaze-html ==0.9.2.0' \
+    --constraint='any.blaze-markup ==0.8.3.0' \
+    --constraint='any.boring ==0.2.2' \
+    --constraint='boring +tagged' \
+    --constraint='any.bsb-http-chunked ==0.0.0.4' \
+    --constraint='any.byteorder ==1.0.4' \
+    --constraint='any.bytestring ==0.10.12.1 || ==0.12.1.0' \
+    --constraint='bytestring -pure-haskell' \
+    --constraint='any.cabal-doctest ==1.0.10' \
+    --constraint='any.call-stack ==0.4.0' \
+    --constraint='any.case-insensitive ==1.2.1.0' \
+    --constraint='any.cassava ==0.5.3.2' \
+    --constraint='any.cborg ==0.2.10.0' \
+    --constraint='cborg +optimize-gmp' \
+    --constraint='any.cereal ==0.5.8.3' \
+    --constraint='cereal -bytestring-builder' \
+    --constraint='any.character-ps ==0.1' \
+    --constraint='any.citeproc ==0.8.1.1' \
+    --constraint='citeproc -executable -icu' \
+    --constraint='any.colour ==2.3.6' \
+    --constraint='any.commonmark ==0.2.6.1' \
+    --constraint='any.commonmark-extensions ==0.2.5.5' \
+    --constraint='any.commonmark-pandoc ==0.2.2.2' \
+    --constraint='any.comonad ==5.0.8' \
+    --constraint='comonad +containers +distributive +indexed-traversable' \
+    --constraint='any.conduit ==1.3.6' \
+    --constraint='any.conduit-extra ==1.3.6' \
+    --constraint='any.constraints ==0.14.2' \
+    --constraint='any.containers ==0.6.4.1 || ==0.6.8' \
+    --constraint='any.contravariant ==1.5.5' \
+    --constraint='contravariant +semigroups +statevar +tagged' \
+    --constraint='any.cookie ==0.5.0' \
+    --constraint='any.crypton ==1.0.0' \
+    --constraint='crypton -check_alignment +integer-gmp -old_toolchain_inliner +support_aesni +support_deepseq +support_pclmuldq +support_rdrand -support_sse +use_target_attributes' \
+    --constraint='any.crypton-connection ==0.4.1' \
+    --constraint='any.crypton-x509 ==1.7.7' \
+    --constraint='any.crypton-x509-store ==1.6.9' \
+    --constraint='any.crypton-x509-system ==1.6.7' \
+    --constraint='any.crypton-x509-validation ==1.6.12' \
+    --constraint='any.data-array-byte ==0.1.0.1' \
+    --constraint='any.data-default ==0.7.1.2' \
+    --constraint='any.data-default-class ==0.1.2.1' \
+    --constraint='any.data-default-instances-containers ==0.1.0.2' \
+    --constraint='any.data-default-instances-dlist ==0.0.1.1' \
+    --constraint='any.data-default-instances-old-locale ==0.0.1.1' \
+    --constraint='any.data-fix ==0.3.4' \
+    --constraint='any.dec ==0.0.6' \
+    --constraint='any.deepseq ==1.4.5.0' \
+    --constraint='any.digest ==0.0.2.1' \
+    --constraint='digest -have_arm64_crc32c -have_builtin_prefetch -have_mm_prefetch -have_sse42 -have_strong_getauxval -have_weak_getauxval +pkg-config' \
+    --constraint='any.directory ==1.3.6.2 || ==1.3.9.0' \
+    --constraint='directory -os-string' \
+    --constraint='any.distributive ==0.6.2.1' \
+    --constraint='distributive +semigroups +tagged' \
+    --constraint='any.djot ==0.1.2.2' \
+    --constraint='any.dlist ==1.0' \
+    --constraint='dlist -werror' \
+    --constraint='any.doclayout ==0.5' \
+    --constraint='any.doctemplates ==0.11.0.1' \
+    --constraint='any.easy-file ==0.2.5' \
+    --constraint='any.emojis ==0.1.4.1' \
+    --constraint='any.exceptions ==0.10.4' \
+    --constraint='any.fast-logger ==3.2.4' \
+    --constraint='any.file-embed ==0.0.16.0' \
+    --constraint='any.file-io ==0.1.4' \
+    --constraint='file-io -os-string' \
+    --constraint='any.filepath ==1.4.2.1 || ==1.4.300.2' \
+    --constraint='filepath -cpphs' \
+    --constraint='any.foldable1-classes-compat ==0.1' \
+    --constraint='foldable1-classes-compat +tagged' \
+    --constraint='any.generically ==0.1.1' \
+    --constraint='any.ghc-bignum ==1.1' \
+    --constraint='any.ghc-boot-th ==9.0.2' \
+    --constraint='any.ghc-prim ==0.7.0' \
+    --constraint='any.gitrev ==1.3.1' \
+    --constraint='any.gridtables ==0.1.0.0' \
+    --constraint='any.haddock-library ==1.11.0' \
+    --constraint='any.half ==0.3.1' \
+    --constraint='any.happy ==2.0.2' \
+    --constraint='any.happy-lib ==2.0.2' \
+    --constraint='any.hashable ==1.4.7.0' \
+    --constraint='hashable -arch-native +integer-gmp -random-initial-seed' \
+    --constraint='any.haskell-lexer ==1.1.1' \
+    --constraint='any.hourglass ==0.2.12' \
+    --constraint='any.hsc2hs ==0.68.10' \
+    --constraint='hsc2hs -in-ghc-tree' \
+    --constraint='any.hslua ==2.3.1' \
+    --constraint='any.hslua-aeson ==2.3.1.1' \
+    --constraint='any.hslua-classes ==2.3.1' \
+    --constraint='any.hslua-cli ==1.4.3' \
+    --constraint='hslua-cli -executable' \
+    --constraint='any.hslua-core ==2.3.2' \
+    --constraint='any.hslua-list ==1.1.4' \
+    --constraint='any.hslua-marshalling ==2.3.1' \
+    --constraint='any.hslua-module-doclayout ==1.2.0' \
+    --constraint='any.hslua-module-path ==1.1.1' \
+    --constraint='any.hslua-module-system ==1.1.2' \
+    --constraint='any.hslua-module-text ==1.1.1' \
+    --constraint='any.hslua-module-version ==1.1.1' \
+    --constraint='any.hslua-module-zip ==1.1.3' \
+    --constraint='any.hslua-objectorientation ==2.3.1' \
+    --constraint='any.hslua-packaging ==2.3.1' \
+    --constraint='any.hslua-repl ==0.1.2' \
+    --constraint='hslua-repl -executable' \
+    --constraint='any.hslua-typing ==0.1.1' \
+    --constraint='any.http-api-data ==0.6.1' \
+    --constraint='http-api-data -use-text-show' \
+    --constraint='any.http-client ==0.7.17' \
+    --constraint='http-client +network-uri' \
+    --constraint='any.http-client-tls ==0.3.6.3' \
+    --constraint='any.http-date ==0.0.11' \
+    --constraint='any.http-media ==0.8.1.1' \
+    --constraint='any.http-semantics ==0.2.1' \
+    --constraint='any.http-types ==0.12.4' \
+    --constraint='any.http2 ==5.3.4' \
+    --constraint='http2 -devel -h2spec' \
+    --constraint='any.indexed-traversable ==0.1.4' \
+    --constraint='any.indexed-traversable-instances ==0.1.2' \
+    --constraint='any.integer-conversion ==0.1.1' \
+    --constraint='any.integer-gmp ==1.1' \
+    --constraint='any.integer-logarithms ==1.0.3.1' \
+    --constraint='integer-logarithms -check-bounds +integer-gmp' \
+    --constraint='any.iproute ==1.7.14' \
+    --constraint='any.ipynb ==0.2' \
+    --constraint='any.isocline ==1.0.9' \
+    --constraint='any.jira-wiki-markup ==1.5.1' \
+    --constraint='any.libyaml ==0.1.4' \
+    --constraint='libyaml -no-unicode -system-libyaml' \
+    --constraint='any.libyaml-clib ==0.2.5' \
+    --constraint='any.lpeg ==1.1.0' \
+    --constraint='lpeg -rely-on-shared-lpeg-library' \
+    --constraint='any.lua ==2.3.3' \
+    --constraint='lua +allow-unsafe-gc -apicheck -cross-compile -export-dynamic -lua_32bits +pkg-config +system-lua' \
+    --constraint='any.memory ==0.18.0' \
+    --constraint='memory +support_bytestring +support_deepseq' \
+    --constraint='any.microlens ==0.4.13.1' \
+    --constraint='any.microlens-ghc ==0.4.14.3' \
+    --constraint='any.microlens-mtl ==0.2.0.3' \
+    --constraint='any.microlens-th ==0.4.3.15' \
+    --constraint='any.mime-types ==0.1.2.0' \
+    --constraint='any.mmorph ==1.2.0' \
+    --constraint='any.monad-control ==1.0.3.1' \
+    --constraint='any.mono-traversable ==1.0.20.0' \
+    --constraint='any.mtl ==2.2.2' \
+    --constraint='any.network ==3.2.4.0' \
+    --constraint='network -devel' \
+    --constraint='any.network-byte-order ==0.1.7' \
+    --constraint='any.network-control ==0.1.3' \
+    --constraint='any.network-uri ==2.6.4.2' \
+    --constraint='any.old-locale ==1.0.0.7' \
+    --constraint='any.old-time ==1.1.0.4' \
+    --constraint='any.open-browser ==0.2.1.0' \
+    --constraint='any.optparse-applicative ==0.18.1.0' \
+    --constraint='optparse-applicative +process' \
+    --constraint='any.ordered-containers ==0.2.4' \
+    --constraint='any.pandoc ==3.5' \
+    --constraint='pandoc +embed_data_files' \
+    --constraint='pandoc-cli +lua -nightly +server' \
+    --constraint='any.pandoc-crossref ==0.3.18.0' \
+    --constraint='pandoc-crossref -enable_flaky_tests' \
+    --constraint='any.pandoc-lua-engine ==0.3.3' \
+    --constraint='any.pandoc-lua-marshal ==0.2.9' \
+    --constraint='any.pandoc-server ==0.1.0.9' \
+    --constraint='any.pandoc-types ==1.23.1' \
+    --constraint='any.parsec ==3.1.14.0 || ==3.1.17.0' \
+    --constraint='any.pem ==0.2.4' \
+    --constraint='any.pretty ==1.1.3.6' \
+    --constraint='any.pretty-show ==1.10' \
+    --constraint='any.prettyprinter ==1.7.1' \
+    --constraint='prettyprinter -buildreadme +text' \
+    --constraint='any.prettyprinter-ansi-terminal ==1.1.3' \
+    --constraint='any.primitive ==0.9.0.0' \
+    --constraint='any.process ==1.6.13.2 || ==1.6.24.0' \
+    --constraint='any.psqueues ==0.2.8.0' \
+    --constraint='any.random ==1.2.1.2' \
+    --constraint='any.recv ==0.1.0' \
+    --constraint='any.regex-base ==0.94.0.2' \
+    --constraint='any.regex-tdfa ==1.3.2.2' \
+    --constraint='regex-tdfa +doctest -force-o2' \
+    --constraint='any.resourcet ==1.3.0' \
+    --constraint='any.rts ==1.0.2' \
+    --constraint='any.safe ==0.3.21' \
+    --constraint='any.safe-exceptions ==0.1.7.4' \
+    --constraint='any.scientific ==0.3.8.0' \
+    --constraint='scientific -integer-simple' \
+    --constraint='any.semialign ==1.3.1' \
+    --constraint='semialign +semigroupoids' \
+    --constraint='any.semigroupoids ==6.0.1' \
+    --constraint='semigroupoids +comonad +containers +contravariant +distributive +tagged +unordered-containers' \
+    --constraint='any.serialise ==0.2.6.1' \
+    --constraint='serialise +newtime15' \
+    --constraint='any.servant ==0.20.2' \
+    --constraint='any.servant-server ==0.20.2' \
+    --constraint='any.simple-sendfile ==0.2.32' \
+    --constraint='simple-sendfile +allow-bsd -fallback' \
+    --constraint='any.singleton-bool ==0.1.8' \
+    --constraint='any.skylighting ==0.14.3' \
+    --constraint='skylighting -executable' \
+    --constraint='any.skylighting-core ==0.14.3' \
+    --constraint='skylighting-core -executable' \
+    --constraint='any.skylighting-format-ansi ==0.1' \
+    --constraint='any.skylighting-format-blaze-html ==0.1.1.2' \
+    --constraint='any.skylighting-format-context ==0.1.0.2' \
+    --constraint='any.skylighting-format-latex ==0.1' \
+    --constraint='any.socks ==0.6.1' \
+    --constraint='any.some ==1.0.6' \
+    --constraint='some +newtype-unsafe' \
+    --constraint='any.sop-core ==0.5.0.2' \
+    --constraint='any.split ==0.2.5' \
+    --constraint='any.splitmix ==0.1.0.5' \
+    --constraint='splitmix -optimised-mixer' \
+    --constraint='any.stm ==2.5.0.0' \
+    --constraint='any.streaming-commons ==0.2.2.6' \
+    --constraint='streaming-commons -use-bytestring-builder' \
+    --constraint='any.strict ==0.5.1' \
+    --constraint='any.syb ==0.7.2.4' \
+    --constraint='any.tagged ==0.8.8' \
+    --constraint='tagged +deepseq +transformers' \
+    --constraint='any.tagsoup ==0.14.8' \
+    --constraint='any.template-haskell ==2.17.0.0' \
+    --constraint='any.temporary ==1.3' \
+    --constraint='any.texmath ==0.12.8.11' \
+    --constraint='texmath -executable -server' \
+    --constraint='any.text ==1.2.5.0 || ==2.1.1' \
+    --constraint='text -developer -pure-haskell +simdutf' \
+    --constraint='any.text-conversions ==0.3.1.1' \
+    --constraint='any.text-iso8601 ==0.1.1' \
+    --constraint='any.text-short ==0.1.6' \
+    --constraint='text-short -asserts' \
+    --constraint='any.th-abstraction ==0.7.0.0' \
+    --constraint='any.th-compat ==0.1.5' \
+    --constraint='any.th-lift ==0.8.4' \
+    --constraint='any.th-lift-instances ==0.1.20' \
+    --constraint='any.these ==1.2.1' \
+    --constraint='any.time ==1.9.3' \
+    --constraint='any.time-compat ==1.9.7' \
+    --constraint='any.time-manager ==0.1.0' \
+    --constraint='any.tls ==2.1.0' \
+    --constraint='tls -devel' \
+    --constraint='any.toml-parser ==2.0.1.0' \
+    --constraint='any.transformers ==0.5.6.2' \
+    --constraint='any.transformers-base ==0.4.6' \
+    --constraint='transformers-base +orphaninstances' \
+    --constraint='any.transformers-compat ==0.7.2' \
+    --constraint='transformers-compat -five +five-three -four +generic-deriving +mtl -three -two' \
+    --constraint='any.typed-process ==0.2.12.0' \
+    --constraint='any.typst ==0.6' \
+    --constraint='typst -executable' \
+    --constraint='any.typst-symbols ==0.1.6' \
+    --constraint='any.unicode-collation ==0.1.3.6' \
+    --constraint='unicode-collation -doctests -executable' \
+    --constraint='any.unicode-data ==0.6.0' \
+    --constraint='unicode-data -dev-has-icu' \
+    --constraint='any.unicode-transforms ==0.4.0.1' \
+    --constraint='unicode-transforms -bench-show -dev -has-icu -has-llvm -use-gauge' \
+    --constraint='any.uniplate ==1.6.13' \
+    --constraint='any.unix ==2.7.2.2 || ==2.8.5.1' \
+    --constraint='unix -os-string' \
+    --constraint='any.unix-compat ==0.7.3' \
+    --constraint='any.unix-time ==0.4.15' \
+    --constraint='any.unliftio ==0.2.25.0' \
+    --constraint='any.unliftio-core ==0.2.1.0' \
+    --constraint='any.unordered-containers ==0.2.20' \
+    --constraint='unordered-containers -debug' \
+    --constraint='any.utf8-string ==1.0.2' \
+    --constraint='any.utility-ht ==0.0.17.2' \
+    --constraint='any.uuid-types ==1.0.6' \
+    --constraint='any.vault ==0.3.1.5' \
+    --constraint='vault +useghc' \
+    --constraint='any.vector ==0.13.1.0' \
+    --constraint='vector +boundschecks -internalchecks -unsafechecks -wall' \
+    --constraint='any.vector-algorithms ==0.9.0.2' \
+    --constraint='vector-algorithms +bench +boundschecks -internalchecks -llvm +properties -unsafechecks' \
+    --constraint='any.vector-stream ==0.1.0.1' \
+    --constraint='any.wai ==3.2.4' \
+    --constraint='any.wai-app-static ==3.1.9' \
+    --constraint='wai-app-static +crypton -print' \
+    --constraint='any.wai-cors ==0.2.7' \
+    --constraint='any.wai-extra ==3.1.15' \
+    --constraint='wai-extra -build-example' \
+    --constraint='any.wai-logger ==2.5.0' \
+    --constraint='any.warp ==3.4.3' \
+    --constraint='warp +allow-sendfilefd -network-bytestring -warp-debug +x509' \
+    --constraint='any.witherable ==0.5' \
+    --constraint='any.word8 ==0.1.3' \
+    --constraint='any.xml ==1.3.14' \
+    --constraint='any.xml-conduit ==1.9.1.3' \
+    --constraint='any.xml-types ==0.3.8' \
+    --constraint='any.yaml ==0.11.11.2' \
+    --constraint='yaml +no-examples +no-exe' \
+    --constraint='any.zip-archive ==0.4.3.2' \
+    --constraint='zip-archive -executable' \
+    --constraint='any.zlib ==0.7.1.0' \
+    --constraint='zlib -bundled-c-zlib +non-blocking-ffi +pkg-config' \
+    ;\
+# Cleanup
+    rm -rf /root/.cabal; \
+    apt-mark auto '.*' > /dev/null; \
+	  [ -z "$manually_installed" ] || apt-mark manual $manually_installed; \
+	  apt-get purge -y --auto-remove \
+        -o APT::AutoRemove::RecommendsImportant=false; \
 
-# cd /
-# ls -l -d /root/.*
-# rm -rf /root/.cabal /root/.ghc
-# rm -rf /tmp/*
-# rm -rf /var/lib/apt/lists/*

From 349d0791c63359b5d1ae85187cb4ef851ea46f95 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 12:15:16 +0200
Subject: [PATCH 04/13] CI: Disable build

---
 .github/workflows/build.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 39dc6d8..9fe726d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -20,6 +20,7 @@ on:
 
 jobs:
   configure:
+    if: false
     name: Configure
     runs-on: ubuntu-latest
     outputs:

From 45ec1ea5467cd66e4f4301762ca5aa0c67262fbc Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 12:30:27 +0200
Subject: [PATCH 05/13] Add experimental GitHub Action

---
 .github/workflows/debian.yaml | 48 +++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 .github/workflows/debian.yaml

diff --git a/.github/workflows/debian.yaml b/.github/workflows/debian.yaml
new file mode 100644
index 0000000..22f0bbd
--- /dev/null
+++ b/.github/workflows/debian.yaml
@@ -0,0 +1,48 @@
+name: Image Builder
+
+on:
+  push:
+    paths:
+      - 'debian/*'
+      - 'versions.md'
+      - 'LICENSE'
+      - '**/bookworm/*'
+  pull_request:
+    # Build, but don't push on pull requests
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    needs: configure
+
+    strategy:
+      fail-fast: false
+      matrix:
+        stack: ${{ fromJSON( needs.configure.outputs.stacks ) }}
+        version: ${{ fromJSON( needs.configure.outputs.pandoc-version ) }}
+
+    env:
+      PUSH_IMAGE: ${{ github.repository == 'pandoc/dockerfiles' &&
+                      (github.ref == 'refs/heads/main' ||
+                       github.ref_type == 'tag' ||
+                       github.event_name != 'pull_request') }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        if: ${{ env.PUSH_IMAGE }}
+        with:
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+
+      - name: Build and maybe push image
+        uses: docker/build-push-action@v5
+        with:
+          file: '3.5/bookworm/Dockerfile'
+          context: '.'
+          push: ${{ env.PUSH_IMAGE }}
+          tags: '3.5-debian'

From a6c88b710f6263777984d9e6c0410b73e2c9b792 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 12:33:48 +0200
Subject: [PATCH 06/13] Run debian CI independently of the paths changed

---
 .github/workflows/debian.yaml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/.github/workflows/debian.yaml b/.github/workflows/debian.yaml
index 22f0bbd..baaecae 100644
--- a/.github/workflows/debian.yaml
+++ b/.github/workflows/debian.yaml
@@ -2,11 +2,6 @@ name: Image Builder
 
 on:
   push:
-    paths:
-      - 'debian/*'
-      - 'versions.md'
-      - 'LICENSE'
-      - '**/bookworm/*'
   pull_request:
     # Build, but don't push on pull requests
 
@@ -14,13 +9,6 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
-    needs: configure
-
-    strategy:
-      fail-fast: false
-      matrix:
-        stack: ${{ fromJSON( needs.configure.outputs.stacks ) }}
-        version: ${{ fromJSON( needs.configure.outputs.pandoc-version ) }}
 
     env:
       PUSH_IMAGE: ${{ github.repository == 'pandoc/dockerfiles' &&

From 24cb4920e36b3ef23dea3d596566595e1974a969 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 13:15:33 +0200
Subject: [PATCH 07/13] Build amd64 and arm64 images

---
 .github/workflows/debian.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/debian.yaml b/.github/workflows/debian.yaml
index baaecae..718a71d 100644
--- a/.github/workflows/debian.yaml
+++ b/.github/workflows/debian.yaml
@@ -20,6 +20,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         if: ${{ env.PUSH_IMAGE }}
@@ -32,5 +38,6 @@ jobs:
         with:
           file: '3.5/bookworm/Dockerfile'
           context: '.'
+          platforms: linux/amd64,linux/arm64/v8
           push: ${{ env.PUSH_IMAGE }}
-          tags: '3.5-debian'
+          tags: 'pandoc/core:3.5-debian'

From 768ea1b6cbff32ba1ddd8720bd7cf4d5ae04b9d5 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 18:29:50 +0200
Subject: [PATCH 08/13] Remove constraint 'bytestring -pure-haskell'

---
 3.5/bookworm/Dockerfile | 1 -
 1 file changed, 1 deletion(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index 67328f4..45ef184 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -109,7 +109,6 @@ RUN set -eux; \
     --constraint='any.bsb-http-chunked ==0.0.0.4' \
     --constraint='any.byteorder ==1.0.4' \
     --constraint='any.bytestring ==0.10.12.1 || ==0.12.1.0' \
-    --constraint='bytestring -pure-haskell' \
     --constraint='any.cabal-doctest ==1.0.10' \
     --constraint='any.call-stack ==0.4.0' \
     --constraint='any.case-insensitive ==1.2.1.0' \

From 52296db8e57aa441bea814076e5d6126fb35494e Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Thu, 17 Oct 2024 19:10:27 +0200
Subject: [PATCH 09/13] Use different bytestring version

---
 3.5/bookworm/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index 45ef184..973347d 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -108,7 +108,7 @@ RUN set -eux; \
     --constraint='boring +tagged' \
     --constraint='any.bsb-http-chunked ==0.0.0.4' \
     --constraint='any.byteorder ==1.0.4' \
-    --constraint='any.bytestring ==0.10.12.1 || ==0.12.1.0' \
+    --constraint='any.bytestring ==0.10.12.1 || ==0.12.0.2' \
     --constraint='any.cabal-doctest ==1.0.10' \
     --constraint='any.call-stack ==0.4.0' \
     --constraint='any.case-insensitive ==1.2.1.0' \

From 13a162164d2f891996e7117f556520027d5efcfc Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Fri, 18 Oct 2024 10:37:00 +0200
Subject: [PATCH 10/13] Adjust GHC options

---
 3.5/bookworm/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index 973347d..b793434 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -57,7 +57,7 @@ RUN set -eux; \
     --prefix=/usr/local \
     --flags='+server +lua' \
     --sysconfdir=/etc \
-    --ghc-options='-O1 -optc-Os -optl=-pthread -fPIC -j +RTS -A128m -n2m -RTS' \
+    --ghc-options='-optc-Os -optl=-pthread -fPIC -j +RTS -A256m -RTS' \
     --constraint='any.Cabal ==3.4.1.0' \
     --constraint='any.Glob ==0.10.2' \
     --constraint='any.HUnit ==1.6.2.0' \

From a13f26a786c6abaed26c523bbc3957f30c366ea3 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Fri, 18 Oct 2024 10:37:55 +0200
Subject: [PATCH 11/13] Build arm64 only

---
 .github/workflows/debian.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/debian.yaml b/.github/workflows/debian.yaml
index 718a71d..ebdf196 100644
--- a/.github/workflows/debian.yaml
+++ b/.github/workflows/debian.yaml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   build:
-    name: Build
+    name: Debian
     runs-on: ubuntu-latest
 
     env:
@@ -38,6 +38,6 @@ jobs:
         with:
           file: '3.5/bookworm/Dockerfile'
           context: '.'
-          platforms: linux/amd64,linux/arm64/v8
+          platforms: linux/arm64/v8
           push: ${{ env.PUSH_IMAGE }}
           tags: 'pandoc/core:3.5-debian'

From c4dbb658ed8c1e60ef612e3d43b172a8354ef3d3 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Fri, 18 Oct 2024 11:02:16 +0200
Subject: [PATCH 12/13] Let GHC use four cores

---
 3.5/bookworm/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index b793434..6d20bb3 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -57,7 +57,7 @@ RUN set -eux; \
     --prefix=/usr/local \
     --flags='+server +lua' \
     --sysconfdir=/etc \
-    --ghc-options='-optc-Os -optl=-pthread -fPIC -j +RTS -A256m -RTS' \
+    --ghc-options='-optc-Os -optl=-pthread -fPIC -j4 +RTS -A256m -RTS' \
     --constraint='any.Cabal ==3.4.1.0' \
     --constraint='any.Glob ==0.10.2' \
     --constraint='any.HUnit ==1.6.2.0' \

From e542f33490d4848f7421751d54d74dce870c39a2 Mon Sep 17 00:00:00 2001
From: Albert Krewinkel <albert@zeitkraut.de>
Date: Fri, 18 Oct 2024 11:19:18 +0200
Subject: [PATCH 13/13] Set GHC's heap to 4G

---
 3.5/bookworm/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/3.5/bookworm/Dockerfile b/3.5/bookworm/Dockerfile
index 6d20bb3..080da5e 100644
--- a/3.5/bookworm/Dockerfile
+++ b/3.5/bookworm/Dockerfile
@@ -57,7 +57,7 @@ RUN set -eux; \
     --prefix=/usr/local \
     --flags='+server +lua' \
     --sysconfdir=/etc \
-    --ghc-options='-optc-Os -optl=-pthread -fPIC -j4 +RTS -A256m -RTS' \
+    --ghc-options='-optc-Os -optl=-pthread -fPIC -j4 +RTS -M4G -A256m -RTS' \
     --constraint='any.Cabal ==3.4.1.0' \
     --constraint='any.Glob ==0.10.2' \
     --constraint='any.HUnit ==1.6.2.0' \