在Debian Buster Slim容器运行Rust程序时出现GLIBC_2.29未找到错误

问题原因 #

编译阶段使用的rust:1.62.1镜像基于较新的系统，其中GLIBC版本高于Debian Buster Slim自带的2.28版本。编译出的二进制程序依赖GLIBC 2.29，但运行环境无法提供对应版本，导致启动报错。

解决方案 #

方案1：使用同版本基础镜像编译 #

将builder阶段的基础镜像换成debian:buster-slim，手动安装Rust工具链，确保编译环境与运行环境的GLIBC版本一致。修改后的Dockerfile：

FROM debian:buster-slim as builder

WORKDIR /bot

# 安装依赖和Rust工具链
RUN apt-get update && apt-get install -y --no-install-recommends \
    cmake \
    curl \
    gcc \
    libssl-dev \
    && curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

# 加载Rust环境变量
ENV PATH="/root/.cargo/bin:${PATH}"

COPY Cargo.toml Cargo.lock ./
RUN mkdir src && echo "// dummy file" > src/lib.rs && cargo build --release && rm -r src

COPY . .
ENV SQLX_OFFLINE true
RUN cargo build --release

FROM debian:buster-slim

RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    ca-certificates \
    libssl1.1 \
    && rm -rf /var/lib/apt/lists/*

COPY --from=builder /bot/target/release/anti_ghost_ping /usr/local/bin/anti_ghost_ping

CMD ["/usr/local/bin/anti_ghost_ping"]

方案2：静态编译（使用Musl工具链） #

用Musl替代GLIBC进行静态编译，生成不依赖系统库的独立二进制文件。修改后的Dockerfile：

FROM rust:1.62.1 as builder

WORKDIR /bot

# 安装Musl工具链
RUN rustup target add x86_64-unknown-linux-musl
RUN apt-get update && apt-get install -y --no-install-recommends \
    cmake \
    musl-tools \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

COPY Cargo.toml Cargo.lock ./
RUN mkdir src && echo "// dummy file" > src/lib.rs && cargo build --release --target x86_64-unknown-linux-musl && rm -r src

COPY . .
ENV SQLX_OFFLINE true
RUN cargo build --release --target x86_64-unknown-linux-musl

FROM debian:buster-slim

RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates && rm -rf /var/lib/apt/lists/*

COPY --from=builder /bot/target/x86_64-unknown-linux-musl/release/anti_ghost_ping /usr/local/bin/anti_ghost_ping

CMD ["/usr/local/bin/anti_ghost_ping"]

注意：若程序依赖需动态链接的C扩展库，静态编译可能需要额外适配调整。

方案3：升级运行阶段镜像到Debian Bullseye #

Debian Bullseye（11）的GLIBC版本为2.31，满足程序对GLIBC 2.29的依赖。只需修改运行阶段的基础镜像：

FROM rust:1.62.1 as builder

WORKDIR /bot

RUN apt-get update && apt-get install -y cmake && apt-get clean

COPY Cargo.toml Cargo.lock ./
RUN mkdir src && echo "// dummy file" > src/lib.rs && cargo build --release && rm -r src

COPY . .
ENV SQLX_OFFLINE true
RUN cargo build --release

FROM debian:bullseye-slim

RUN apt-get update && apt-get upgrade -y && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/*

COPY --from=builder /bot/target/release/anti_ghost_ping /usr/local/bin/anti_ghost_ping

CMD ["/usr/local/bin/anti_ghost_ping"]

内容的提问来源于stack exchange，提问作者Leastrio