Update ClusterFuzzLite Dockerfile to Ubuntu 25.04

[Adarshkumar0509]

This pull request updates .clusterfuzzlite/Dockerfile. It originally proposed using the gcr.io/oss-fuzz-base/base-builder-python:ubuntu-25-04 base image, but that tag is not yet available, so the Dockerfile has been reverted to the existing ubuntu-24-04 base image.

Changes:

• Keep the existing ClusterFuzzLite base image ubuntu-24-04.
• Leave the rest of the build and dependency installation steps unchanged.

Rationale:

• Keeps the fuzzing environment on a known-good base image while the main project is upgraded in Update Dockerfile to use python:3.13.11-alpine3.22 #2115.
• Avoids using a non-existent ubuntu-25-04 base-builder image, which causes the ClusterFuzzLite build to fail.

Refs #2105

Related PR: #2115 (main Dockerfile Python upgrade).

[sydseter]

These needs to be done together: #2115

[sydseter]

As we aren’t installing Ubuntu 25.04, Puthon 3.13 need to be installed manually.

[sydseter]

‎.clusterfuzzlite/Dockerfile is still using Python 3.12. Python 3.13 need to be explicitly installed.

[Adarshkumar0509]

sir, I tried installing Python 3.13 in .clusterfuzzlite/Dockerfile using apt, but the OSS-Fuzz base image for ubuntu-24-04 doesn’t provide python3.13, so CI failed. I’ve reverted that change so this PR keeps the current working setup. Could you please suggest the best way to add Python 3.13 to the ClusterFuzzLite image (e.g., compiling from source or following an existing OSS-Fuzz pattern)? I’m happy to update the Dockerfile once I know your preferred approach.

[sydseter]

It’s still possible to install puthon 3.13 you used need to add the right apt repositories

[sydseter]

sudo apt update && sudo apt upgrade -y
sudo apt install software-properties-common -y
sudo add-apt-repository ppa:deadsnakes/ppa
sudo apt update
apt upgrade -y && apt-get install -y python3.13 python3.13-dev python3.13-distutils
apt-get install -y python3.13-pip
curl -sS https://bootstrap.pypa.io/get-pip.py | python3.13

[sydseter]

Haven’t tested this. So you may need to adjust a bit. Tell me if it is too difficult for you.

[sydseter]

@Adarshkumar0509 have a look at the documentation for working on the fuzzer https://github.com/OWASP/cornucopia/tree/master/scripts#developing-fuzzers

It’s worthwhile setting up the fuzzers locally and testing it there.

[sydseter]

Regarding your issue, instead of:

apt-get install -y python3.13-pip

Try

python3.13 -m ensurepip --upgrade

[sydseter]

lets go back to have it was use python3 instead of python1.3
It works for now so let’s just leave it at that.

[sydseter]

It may be that I’ll have to pick this up later.

[sydseter]

@Adarshkumar0509 create a new pull-request and update the branch with master. It could be that the fuzzing has gone a bit stray. Remember to configure git commit signing: https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits

[sydseter]

@Adarshkumar0509 please ensure that your commits are signed.

[Adarshkumar0509]

Sorry about that, and thanks for the reminder. I’ll set up commit signing following the GitHub documentation and make sure all my future commits to this repository are properly signed.