Add Debian stable (trixie) .deb package builds

Parameterize the Dockerfile with DEBIAN_SUITE build arg (default: sid)
so the same Dockerfile builds for both Debian sid and trixie (stable).

Key changes:
- Both FROM lines now use debian:${DEBIAN_SUITE}-slim
- Runtime stage lets ffmpeg pull correct libav* versions per suite
- Remove hardcoded libsimdjson30 (transitive dep, let apt resolve)
- Add GOTOOLCHAIN=auto for go2rtc build (trixie Go 1.24 → auto-downloads 1.26)
- Expand CI matrix to 6 builds (3 arches × 2 suites)
- Generate suite-specific DEBIAN/control dependencies
- .deb filenames now include suite: lightnvr_{ver}_{suite}_{arch}.deb

Closes #349

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: matteius

.github/workflows/debian-package.yml

@@ -12,21 +12,38 @@ permissions:
 
 jobs:
   build-deb:
-    name: Build .deb (${{ matrix.deb_arch }})
+    name: Build .deb (${{ matrix.debian_suite }}/${{ matrix.deb_arch }})
     runs-on: ${{ matrix.runner }}
     strategy:
       fail-fast: false
       matrix:
         include:
+          # Debian sid (unstable) builds
           - runner: ubuntu-latest
             platform: linux/amd64
             deb_arch: amd64
+            debian_suite: sid
           - runner: ubuntu-24.04-arm
             platform: linux/arm64
             deb_arch: arm64
+            debian_suite: sid
           - runner: ubuntu-latest
             platform: linux/arm/v7
             deb_arch: armhf
+            debian_suite: sid
+          # Debian trixie (13/stable) builds
+          - runner: ubuntu-latest
+            platform: linux/amd64
+            deb_arch: amd64
+            debian_suite: trixie
+          - runner: ubuntu-24.04-arm
+            platform: linux/arm64
+            deb_arch: arm64
+            debian_suite: trixie
+          - runner: ubuntu-latest
+            platform: linux/arm/v7
+            deb_arch: armhf
+            debian_suite: trixie
 
     steps:
       - name: Checkout
@@ -56,12 +73,15 @@ jobs:
           push: false
           load: true
           tags: lightnvr-pkg:local
+          build-args: |
+            DEBIAN_SUITE=${{ matrix.debian_suite }}
 
       - name: Extract files and create .deb package
         run: |
           VERSION="${{ steps.version.outputs.version }}"
           DEB_ARCH="${{ matrix.deb_arch }}"
-          PKG_NAME="lightnvr_${VERSION}_${DEB_ARCH}"
+          DEBIAN_SUITE="${{ matrix.debian_suite }}"
+          PKG_NAME="lightnvr_${VERSION}_${DEBIAN_SUITE}_${DEB_ARCH}"
           PKG_DIR="$(pwd)/pkg/${PKG_NAME}"
 
           # ── Directory structure ──────────────────────────────────────────────
@@ -186,6 +206,22 @@ jobs:
           # Un-indent the service file (heredoc indented for readability)
           sed -i 's/^          //' "${PKG_DIR}/lib/systemd/system/lightnvr.service"
 
+          # ── Suite-specific FFmpeg dependency names ─────────────────────────
+          case "${DEBIAN_SUITE}" in
+            sid)
+              FFMPEG_DEPS="libavcodec62 | libavcodec-extra, libavformat62, libavutil60, libswscale9"
+              SUITE_NOTE="Note: This package targets Debian sid (unstable)."
+              ;;
+            trixie)
+              FFMPEG_DEPS="libavcodec61 | libavcodec-extra, libavformat61, libavutil59, libswscale8"
+              SUITE_NOTE="Note: This package targets Debian 13 trixie (stable)."
+              ;;
+            *)
+              echo "ERROR: Unknown Debian suite: ${DEBIAN_SUITE}"
+              exit 1
+              ;;
+          esac
+
           # ── DEBIAN/control ──────────────────────────────────────────────────
           INSTALLED_SIZE=$(du -sk "${PKG_DIR}" | cut -f1)
           cat > "${PKG_DIR}/DEBIAN/control" << CONTROL_EOF
@@ -194,7 +230,7 @@ jobs:
           Architecture: ${DEB_ARCH}
           Maintainer: OpenSensor <support@opensensor.io>
           Installed-Size: ${INSTALLED_SIZE}
-          Depends: ffmpeg, libavcodec62 | libavcodec-extra, libavformat62, libavutil60, libswscale9, libcurl4t64 | libcurl4, libmbedtls21, libmosquitto1, libcjson1, procps
+          Depends: ffmpeg, ${FFMPEG_DEPS}, libcurl4t64 | libcurl4, libmbedtls21, libmosquitto1, libcjson1, procps
           Section: net
           Priority: optional
           Homepage: https://github.com/opensensor/lightNVR
@@ -205,7 +241,7 @@ jobs:
            Features: RTSP recording, WebRTC streaming (go2rtc), object detection
            (SOD), ONVIF discovery, MQTT integration, and a web-based UI.
            .
-           Note: This package targets Debian sid. Ubuntu users are encouraged to
+           ${SUITE_NOTE} Ubuntu users are encouraged to
            use the official Docker image (ghcr.io/opensensor/lightnvr).
           CONTROL_EOF
           sed -i 's/^          //' "${PKG_DIR}/DEBIAN/control"
@@ -267,7 +303,7 @@ jobs:
       - name: Upload .deb artifact
         uses: actions/upload-artifact@v6
         with:
-          name: deb-${{ matrix.deb_arch }}
+          name: deb-${{ matrix.debian_suite }}-${{ matrix.deb_arch }}
           path: pkg/*.deb
           retention-days: 7
 

Dockerfile

@@ -1,11 +1,13 @@
 # Stage 1: Build image
+ARG DEBIAN_SUITE=sid
 ARG SQLITE_YEAR=2026
 ARG SQLITE_AUTOCONF_VERSION=3520000
 ARG LIBUV_VERSION=1.52.1
 ARG LLHTTP_VERSION=9.3.1
 
-FROM debian:sid-slim AS builder
+FROM debian:${DEBIAN_SUITE}-slim AS builder
 
+ARG DEBIAN_SUITE
 ARG SQLITE_YEAR
 ARG SQLITE_AUTOCONF_VERSION
 ARG LIBUV_VERSION
@@ -15,14 +17,14 @@ ARG LLHTTP_VERSION
 ENV DEBIAN_FRONTEND=noninteractive
 
 # Install build dependencies including Node.js and FFmpeg dev libraries
-# Debian sid ships Go 1.26, Node.js 22.x, npm, and FFmpeg 8.0.1 natively
+# sid ships Go 1.26+/Node 22.x/FFmpeg 8.x; trixie ships Go 1.24+/Node 20.x/FFmpeg 7.x
 RUN apt-get update && apt-get install -y \
     git cmake build-essential pkg-config file \
     libavcodec-dev libavformat-dev libavutil-dev libswscale-dev \
     libcurl4-openssl-dev \
     libmbedtls-dev curl wget ca-certificates gpg libcjson-dev \
     libmosquitto-dev \
-    nodejs npm libsimdjson30 \
+    nodejs npm \
     golang-go && \
     # Verify installation
     node --version && \
@@ -107,8 +109,8 @@ RUN mkdir -p /usr/lib/pkgconfig && \
 RUN mkdir -p /bin /etc/lightnvr/go2rtc && \
     # Build go2rtc from local submodule (already copied by COPY . .)
     cd /opt/go2rtc && \
-    go mod tidy && \
-    CGO_ENABLED=0 go build -ldflags "-s -w" -trimpath -o /bin/go2rtc . && \
+    GOTOOLCHAIN=auto go mod tidy && \
+    GOTOOLCHAIN=auto CGO_ENABLED=0 go build -ldflags "-s -w" -trimpath -o /bin/go2rtc . && \
     chmod +x /bin/go2rtc && \
     # Create basic configuration file
     echo "# go2rtc configuration file" > /etc/lightnvr/go2rtc/go2rtc.yaml && \
@@ -168,19 +170,19 @@ RUN mkdir -p /etc/lightnvr /var/lib/lightnvr/data /var/log/lightnvr /var/run/lig
     ./scripts/install.sh --prefix=/ --with-go2rtc --go2rtc-config-dir=/etc/lightnvr/go2rtc --without-systemd
 
 # Stage 2: Minimal runtime image
-FROM debian:sid-slim AS runtime
+FROM debian:${DEBIAN_SUITE}-slim AS runtime
 
+ARG DEBIAN_SUITE
 ARG SQLITE_YEAR
 ARG SQLITE_AUTOCONF_VERSION
 
 ENV DEBIAN_FRONTEND=noninteractive
 
 # Install only necessary runtime dependencies
-# Debian sid ships FFmpeg 8.0.1: libavcodec62, libavformat62, libavutil60, libswscale9
-# ffmpeg CLI is needed by go2rtc for audio transcoding (AAC→OPUS for WebRTC)
+# ffmpeg pulls the correct versioned libavcodec/libavformat/libavutil/libswscale
+# for the target suite (e.g. libavcodec62 on sid, libavcodec61 on trixie)
 RUN apt-get update && apt-get install -y --no-install-recommends \
     ffmpeg \
-    libavcodec62 libavformat62 libavutil60 libswscale9 \
     libcurl4t64 libmbedtls21 libmbedcrypto16 procps curl ca-certificates \
     libmosquitto1 && \
     rm -rf /var/lib/apt/lists/*