2026

.gitea/workflows/build-publish.yml

@@ -108,9 +108,10 @@ jobs:
           done
 
           # ---- DEBIAN/control --------------------------------------------------
-          # Minimum metadata dpkg requires. We don't declare runtime Depends:
-          # the .deb bundles every shared library nginx needs (see the ldd
-          # loop above), so the only thing the host must provide is glibc.
+          # Minimum metadata dpkg requires. The .deb bundles every shared library
+          # nginx links against (see the ldd loop above), so the only Depends we
+          # declare is libjemalloc2 — the systemd unit LD_PRELOADs it for the
+          # nginx workers; without it, the unit would fail to start.
           sudo mkdir -p "${DEB_DIR}"
           sudo tee "${DEB_DIR}/control" >/dev/null <<EOF
           Package: ${PKG_NAME}
@@ -118,6 +119,7 @@ jobs:
           Section: base
           Priority: optional
           Architecture: ${ARCH}
+          Depends: libjemalloc2
           Maintainer: Julio <me@julio.al>
           Description: Nginx L7 DDoS Protection (The-World-Is-Yours), built by RAWeb CI.
           EOF