Install Quarto from the Posit Open apt repo via quarto.install() by bschwedler · Pull Request #479 · posit-dev/images-shared

bschwedler · 2026-04-22T17:12:10Z

Summary

Migrate Quarto installation from GitHub tarball to the Posit Open apt repository, unify apt/dnf repo setup macros, and enforce a single-version contract for Quarto dependencies.

Why

The quarto deb is published as a multi-arch package (amd64 + arm64) on both jammy and noble, eliminating the ${TARGETARCH} URL-construction logic that caused 404s in images-examples#18.
dpkg owns the install, so apt-get remove quarto is a clean undo and goss package.quarto.versions assertions work directly.
No tarball extraction; xz-utils is only installed when with_tinytex=True (to unpack the TinyTeX .tar.xz).

Changes

`apt.j2` and `dnf.j2` — unified repo setup

Replace setup_posit_cloudsmith() and setup_posit_open() with a single setup_posit_repo(repo) macro that takes "pro" or "open". Same change in both apt and dnf.
Add pro_repo and open_repo boolean params to setup() / run_setup() so a single call can configure one or both Posit repositories. Defaults (pro_repo=True, open_repo=False) maintain backward compatibility.
Remove the old per-repo aliases — no product templates call them directly.

`quarto.j2`

Rewrite install() to use apt-get install quarto={version} from the Open repo instead of downloading a tarball from GitHub. Runs apt-mark hold quarto to prevent unintended upgrades.
Remove GH_TOKEN secret mount infrastructure (no longer downloading from GitHub).
Rename get_version_directory() to get_directory() since the version param is no longer meaningful. The old name is retained as a backward-compatible alias.
symlink_version() / symlink_binary() resolve against flat /opt/quarto/. The deb's postinst already symlinks /usr/local/bin/quarto, so explicit symlink_binary calls for quarto are typically unnecessary.

Config validation

Add validate_single_version field validator on QuartoDependencyVersions that rejects multiple Quarto versions at config parse time. The apt package installs to a flat /opt/quarto/ directory with no version scoping, so multi-version coexistence is not possible.

Companion PRs

images-connect #70
images-workbench #78

Test plan

pytest test/config/ and pytest test/cli/ — 533 tests pass
Snapshot resources under test/resources/ updated
Docs in docs/templating.qmd updated
CI green on all three repos

github-actions · 2026-04-22T17:21:44Z

Test Results

1 457 tests +10 1 457 ✅ +10 8m 53s ⏱️ -26s
1 suites ± 0 0 💤 ± 0
1 files ± 0 0 ❌ ± 0

Results for commit b7d0367. ± Comparison against base commit f73b718.

♻️ This comment has been updated with latest results.

ianpittwood

Just a couple small changes, otherwise looks good so far

Switch `workbench-session` to install Quarto via `apt-get install quarto={version}` from the Posit Open apt repository, using the updated `quarto.install()` macro from `posit-dev/images-shared`. Why: - Avoids `${TARGETARCH}` URL construction. Posit publishes `quarto` as a multi-arch deb (amd64 + arm64) on both `jammy` and `noble`. - dpkg owns the install, so goss `package.quarto.versions` assertions work directly without path-based proxies. - No tarball extraction. The `quarto` deb installs to a flat `/opt/quarto/` directory (the binary at `/opt/quarto/bin/quarto`) and symlinks `/usr/local/bin/quarto` via its postinst script. Consequences in this repo: - Drop the redundant `quarto.symlink_binary(...)` call in `workbench-session/template/Containerfile.ubuntu*.jinja2` — the deb's postinst already creates the `/usr/local/bin/quarto` symlink. - Install `xz-utils` explicitly in the TinyTeX RUN; it is needed to unpack the TinyTeX `.tar.xz` archive and was previously pulled in transitively by the tarball install. - Update goss path check from `/opt/quarto/{version}` to the `/opt/quarto/bin/quarto` binary and add a `package.quarto.versions` check (now possible because the install is dpkg-tracked). The `workbench` image (as distinct from `workbench-session`) bundles Quarto with `rstudio-server` and uses `quarto.install_tinytex_command(...)` against that bundled binary. That flow is unchanged. Requires `posit-dev/images-shared#479`.

Copilot

Pull request overview

Migrates Quarto installation from GitHub tarballs to the Posit Open package repositories, unifies apt/dnf repo setup macros, and enforces a single-version constraint for Quarto dependencies to match the flat /opt/quarto install layout.

Changes:

Replace Quarto tarball installs with apt-get install quarto=... (and dnf install ...) from Posit Open, with version pinning/locking.
Unify Posit repo setup macros for both apt and dnf (setup_posit_repo("pro"|"open")) and add pro_repo / open_repo toggles to setup() / run_setup().
Enforce “single Quarto version only” at config-parse time and update tests/resources/docs accordingly.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
posit-bakery/posit_bakery/config/templating/macros/quarto.j2	Switch Quarto install to Posit Open repo; add single-version guard; adjust directory/symlink helpers.
posit-bakery/posit_bakery/config/templating/macros/apt.j2	Unify repo setup into `setup_posit_repo` and add repo toggles to `setup()` / `run_setup()`.
posit-bakery/posit_bakery/config/templating/macros/dnf.j2	Same unification/toggles as apt for rpm-based images.
posit-bakery/posit_bakery/config/dependencies/quarto.py	Add Pydantic validator rejecting multiple Quarto versions.
posit-bakery/docs/templating.qmd	Update docs for new repo macros and Quarto install behavior.
posit-bakery/test/config/templating/test_macros.py	Update/add macro rendering tests for new repo helpers and Quarto install behavior.
posit-bakery/test/config/test_config.py	Update expected rendered Containerfile content for new Quarto install commands.
posit-bakery/test/config/image/test_matrix.py	Adjust Quarto versions list to single-version expectation.
posit-bakery/test/config/dependencies/test_dependency.py	Add tests for Quarto single-version constraint.
posit-bakery/test/cli/test_common.py	Update CLI parsing test to reject multiple Quarto versions.
posit-bakery/test/resources/**	Update snapshots (Containerfiles/goss/bakery.yaml) for new Quarto install layout and version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-29T16:54:46Z

+dnf install -yq \
+    quarto-{{ version | trim }}{% if with_tinytex %} \
+    xz{% endif %} && \
+dnf versionlock add quarto && \


In the RHEL branch this uses dnf versionlock add quarto, but the versionlock subcommand typically comes from an optional plugin package (e.g., dnf-plugins-core / the versionlock plugin) and isn’t installed by dnf.setup() or this macro. As written, Quarto installs on RHEL are likely to fail at build time on minimal bases. Consider installing the required plugin before invoking dnf versionlock, or dropping the versionlock step and relying on installing the requested version explicitly.

Suggested change

dnf versionlock add quarto && \

Copilot · 2026-04-29T16:54:46Z

+:param codename: Override the OS codename used by the setup script. Useful when
    Posit packages are not yet published for the current OS (e.g., using noble packages on
    resolute). When set, the codename is passed as an environment variable to the script
    per the Cloudsmith docs.


The codename parameter docs still reference “Cloudsmith docs/setup script”, but this macro is now the generic Posit repo setup helper (dl.posit.co/public/{pro,open}/setup.deb.sh). Please update the wording so it doesn’t imply Cloudsmith-specific behavior/requirements (and matches the new macro naming).

Suggested change

:param codename: Override the OS codename used by the setup script. Useful when

Posit packages are not yet published for the current OS (e.g., using noble packages on

resolute). When set, the codename is passed as an environment variable to the script

per the Cloudsmith docs.

:param codename: Override the OS codename used by the Posit repository setup helper.

Useful when Posit packages are not yet published for the current OS (e.g., using

noble packages on resolute). When set, the codename is passed to the setup helper

script as an environment variable.

ianpittwood · 2026-04-29T19:27:36Z

+{%- endmacro %}
+
+{# Backward-compatible alias for get_directory(). #}
+{% macro get_version_directory(version = None) -%}


I think we should add a deprecation warning here, but it may require something custom as I am unsure Jinja supports warnings in addition to errors.

Migrate Quarto installation from GitHub tarball downloads to the Posit Open apt repository, unify apt/dnf repo setup macros, and enforce a single-version contract for Quarto dependencies. - Replace setup_posit_cloudsmith() and setup_posit_open() with a single setup_posit_repo(repo) macro that takes "pro" or "open", with allowlist validation. Same change in both apt.j2 and dnf.j2. - Add pro_repo and open_repo boolean params to setup()/run_setup() so a single call can configure one or both Posit repositories. - Rewrite quarto.install() to use apt-get install quarto={version} from the Open repo. Run apt-mark hold quarto to prevent upgrades. - Rename get_version_directory() to get_directory() with a backward- compatible alias, since the flat /opt/quarto/ path is no longer version-scoped. - Add validate_single_version field validator on QuartoDependencyVersions that rejects multiple Quarto versions at config parse time.

Switch Connect and Connect Content to install Quarto via `apt-get install quarto={version}` from the Posit Open apt repository, using the updated `quarto.install()` macro from `posit-dev/images-shared`. Why: - Avoids `${TARGETARCH}` URL construction. Posit publishes `quarto` as a multi-arch deb (amd64 + arm64) on both `jammy` and `noble`. - dpkg owns the install, so goss `package.quarto.versions` assertions work directly without path-based proxies. - No tarball extraction. The `quarto` deb installs to a flat `/opt/quarto/` directory (the binary at `/opt/quarto/bin/quarto`) and symlinks `/usr/local/bin/quarto` via its postinst script. Consequences in this repo: - Flatten the vestigial `{% for quarto_version in Dependencies.quarto %}` loops in `connect/template/Containerfile.ubuntu*.jinja2`, `scripts/install_connect.sh.jinja2`, and `test/goss.yaml.jinja2`. Every Connect image has always shipped exactly one Quarto, so the loop is unused in practice. (Apt also does not support installing multiple versions into the same prefix.) - Drop the redundant `quarto.symlink_binary(...)` call in connect-content templates — the deb's postinst already creates the `/usr/local/bin/quarto` symlink. - Install `xz-utils` explicitly in the TinyTeX RUN; it is needed to unpack the TinyTeX `.tar.xz` archive and was previously pulled in transitively by the tarball install. - Update path references in `install_connect.sh.jinja2` and the goss templates from `/opt/quarto/{version}/bin/quarto` to `/opt/quarto/bin/quarto`. Add a `package.quarto.versions` check in `connect-content` goss (now possible because the install is dpkg- tracked). Only the quarto install blocks and their direct consumers (goss path checks, `install_connect.sh` Rscript runner config) are touched in the rendered Containerfiles. Rerendering would also pick up unrelated drift; those drift hunks are intentionally out of scope for this PR. Requires `posit-dev/images-shared#479`.

Switch `workbench-session` to install Quarto via `apt-get install quarto={version}` from the Posit Open apt repository, using the updated `quarto.install()` macro from `posit-dev/images-shared`. Why: - Avoids `${TARGETARCH}` URL construction. Posit publishes `quarto` as a multi-arch deb (amd64 + arm64) on both `jammy` and `noble`. - dpkg owns the install, so goss `package.quarto.versions` assertions work directly without path-based proxies. - No tarball extraction. The `quarto` deb installs to a flat `/opt/quarto/` directory (the binary at `/opt/quarto/bin/quarto`) and symlinks `/usr/local/bin/quarto` via its postinst script. Consequences in this repo: - Drop the redundant `quarto.symlink_binary(...)` call in `workbench-session/template/Containerfile.ubuntu*.jinja2` — the deb's postinst already creates the `/usr/local/bin/quarto` symlink. - Install `xz-utils` explicitly in the TinyTeX RUN; it is needed to unpack the TinyTeX `.tar.xz` archive and was previously pulled in transitively by the tarball install. - Update goss path check from `/opt/quarto/{version}` to the `/opt/quarto/bin/quarto` binary and add a `package.quarto.versions` check (now possible because the install is dpkg-tracked). The `workbench` image (as distinct from `workbench-session`) bundles Quarto with `rstudio-server` and uses `quarto.install_tinytex_command(...)` against that bundled binary. That flow is unchanged. Requires `posit-dev/images-shared#479`.

bschwedler requested a review from ianpittwood as a code owner April 22, 2026 17:12

This was referenced Apr 22, 2026

Install Quarto from the Posit Open apt repo posit-dev/images-connect#70

Merged

Install Quarto from the Posit Open apt repo in workbench-session posit-dev/images-workbench#78

Merged

Handle quarto version for product config #422

Closed

ianpittwood requested changes Apr 23, 2026

View reviewed changes

Comment thread posit-bakery/posit_bakery/config/templating/macros/apt.j2 Outdated

Comment thread posit-bakery/posit_bakery/config/templating/macros/quarto.j2

ianpittwood force-pushed the quarto-via-apt branch 3 times, most recently from 2ab4e11 to 83e1a2a Compare April 27, 2026 20:16

bschwedler force-pushed the quarto-via-apt branch from 83e1a2a to 69cd79f Compare April 28, 2026 19:42

bschwedler force-pushed the quarto-via-apt branch 6 times, most recently from d6f597b to 97f7b4b Compare April 29, 2026 16:03

bschwedler requested a review from ianpittwood April 29, 2026 16:06

bschwedler force-pushed the quarto-via-apt branch from 97f7b4b to 9b7003b Compare April 29, 2026 16:06

ianpittwood requested a review from Copilot April 29, 2026 16:48

Copilot started reviewing on behalf of ianpittwood April 29, 2026 16:48 View session

Copilot AI reviewed Apr 29, 2026

View reviewed changes

bschwedler force-pushed the quarto-via-apt branch from 9b7003b to 9f56f2f Compare April 29, 2026 17:45

ianpittwood approved these changes Apr 29, 2026

View reviewed changes

bschwedler force-pushed the quarto-via-apt branch from 9f56f2f to b7d0367 Compare April 30, 2026 13:52

bschwedler enabled auto-merge April 30, 2026 13:58

bschwedler added this pull request to the merge queue Apr 30, 2026

Merged via the queue into main with commit 09bbcd1 Apr 30, 2026
23 checks passed

bschwedler deleted the quarto-via-apt branch April 30, 2026 14:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Install Quarto from the Posit Open apt repo via quarto.install()#479

Install Quarto from the Posit Open apt repo via quarto.install()#479
bschwedler merged 1 commit intomainfrom
quarto-via-apt

bschwedler commented Apr 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 22, 2026 •

edited

Loading

Uh oh!

ianpittwood left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 29, 2026

Uh oh!

Copilot AI Apr 29, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ianpittwood Apr 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

bschwedler commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Why

Changes

apt.j2 and dnf.j2 — unified repo setup

quarto.j2

Config validation

Companion PRs

Test plan

Uh oh!

github-actions Bot commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

ianpittwood left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ianpittwood Apr 29, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

bschwedler commented Apr 22, 2026 •

edited

Loading

`apt.j2` and `dnf.j2` — unified repo setup

`quarto.j2`

github-actions Bot commented Apr 22, 2026 •

edited

Loading