From 75ba8c294268ed22e92431023faa0708784524f2 Mon Sep 17 00:00:00 2001
From: Paolo Cuffiani <paolo.cuffiani@chialab.it>
Date: Wed, 21 Oct 2026 17:15:30 +0200
Subject: [PATCH 1/4] avoid fail-fast, as it often fails too fast

---
 .github/workflows/publish.5.yml      | 1 +
 .github/workflows/publish.7.yml      | 1 +
 .github/workflows/publish.8.yml      | 1 +
 .github/workflows/publish.compat.yml | 1 +
 .github/workflows/publish.latest.yml | 1 +
 .github/workflows/test.5.yml         | 1 +
 .github/workflows/test.7.yml         | 1 +
 .github/workflows/test.8.yml         | 1 +
 .github/workflows/test.compat.yml    | 1 +
 .github/workflows/test.latest.yml    | 1 +
 10 files changed, 10 insertions(+)

diff --git a/.github/workflows/publish.5.yml b/.github/workflows/publish.5.yml
index f5f8e2e..a89608e 100644
--- a/.github/workflows/publish.5.yml
+++ b/.github/workflows/publish.5.yml
@@ -12,6 +12,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ github.event_name != 'pull_request' && !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '5.6' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/publish.7.yml b/.github/workflows/publish.7.yml
index b3f0ae2..56cbb8b 100644
--- a/.github/workflows/publish.7.yml
+++ b/.github/workflows/publish.7.yml
@@ -12,6 +12,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ github.event.workflow_run.conclusion == 'success' && !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '7.0', '7.1', '7.2', '7.3', '7.4' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/publish.8.yml b/.github/workflows/publish.8.yml
index ba14ff8..ad6ae3f 100644
--- a/.github/workflows/publish.8.yml
+++ b/.github/workflows/publish.8.yml
@@ -12,6 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' && !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '8.0', '8.1', '8.2', '8.3', '8.4', '8.5' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/publish.compat.yml b/.github/workflows/publish.compat.yml
index b3dc9e1..59bd4f3 100644
--- a/.github/workflows/publish.compat.yml
+++ b/.github/workflows/publish.compat.yml
@@ -12,6 +12,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ github.event.workflow_run.conclusion == 'success' && !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '5.6' ]
         flavor: [ '', '-apache', '-fpm' ]
diff --git a/.github/workflows/publish.latest.yml b/.github/workflows/publish.latest.yml
index 6ca6e7f..3f7fdf4 100644
--- a/.github/workflows/publish.latest.yml
+++ b/.github/workflows/publish.latest.yml
@@ -12,6 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' && !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ 'latest', 'alpine' ]
     steps:
diff --git a/.github/workflows/test.5.yml b/.github/workflows/test.5.yml
index 99db370..09f8b72 100644
--- a/.github/workflows/test.5.yml
+++ b/.github/workflows/test.5.yml
@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '5.6' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/test.7.yml b/.github/workflows/test.7.yml
index 39ed282..5debe58 100644
--- a/.github/workflows/test.7.yml
+++ b/.github/workflows/test.7.yml
@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '7.0', '7.1', '7.2', '7.3', '7.4' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/test.8.yml b/.github/workflows/test.8.yml
index dcfade8..2dc55b5 100644
--- a/.github/workflows/test.8.yml
+++ b/.github/workflows/test.8.yml
@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '8.0', '8.1', '8.2', '8.3', '8.4', '8.5' ]
         flavor: [ '', '-apache', '-fpm', '-alpine', '-fpm-alpine' ]
diff --git a/.github/workflows/test.compat.yml b/.github/workflows/test.compat.yml
index 2b15cc4..8c77ea7 100644
--- a/.github/workflows/test.compat.yml
+++ b/.github/workflows/test.compat.yml
@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ '5.6' ]
         flavor: [ '', '-apache', '-fpm' ]
diff --git a/.github/workflows/test.latest.yml b/.github/workflows/test.latest.yml
index 1f26956..86d69ce 100644
--- a/.github/workflows/test.latest.yml
+++ b/.github/workflows/test.latest.yml
@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ !contains(github.event.commits[0].message, '[skip ci]') && !contains(github.event.commits[0].message, '[ci skip]') }}
     strategy:
+      fail-fast: false
       matrix:
         version: [ 'latest', 'alpine' ]
     services:

From 412d9735572983d22c70b4fc8f0fe1a885a4e86b Mon Sep 17 00:00:00 2001
From: Paolo Cuffiani <paolo.cuffiani@chialab.it>
Date: Wed, 21 Oct 2026 17:46:49 +0200
Subject: [PATCH 2/4] update PEAR before installing anything

---
 Dockerfile                   | 3 +++
 Dockerfile.alpine            | 3 +++
 compat/Dockerfile.5.6        | 3 +++
 compat/Dockerfile.5.6-apache | 3 +++
 compat/Dockerfile.5.6-fpm    | 3 +++
 5 files changed, 15 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index c0b8359..11e7bf5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,6 +18,9 @@ ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/do
 
 RUN chmod +x /usr/local/bin/install-php-extensions
 
+# PEAR < 1.10.18 can't read pecl.php.net responses anymore.
+RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
+
 RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
diff --git a/Dockerfile.alpine b/Dockerfile.alpine
index 9fddb5c..5fa4e50 100644
--- a/Dockerfile.alpine
+++ b/Dockerfile.alpine
@@ -6,6 +6,9 @@ LABEL maintainer="dev@chialab.io"
 ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/
 RUN chmod +x /usr/local/bin/install-php-extensions
 
+# PEAR < 1.10.18 can't read pecl.php.net responses anymore.
+RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
+
 RUN apk add --no-cache \
       coreutils \
       curl \
diff --git a/compat/Dockerfile.5.6 b/compat/Dockerfile.5.6
index c5f5d0d..b296db7 100644
--- a/compat/Dockerfile.5.6
+++ b/compat/Dockerfile.5.6
@@ -211,6 +211,9 @@ ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/do
 
 RUN chmod +x /usr/local/bin/install-php-extensions
 
+# PEAR < 1.10.18 can't read pecl.php.net responses anymore.
+RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
+
 RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
diff --git a/compat/Dockerfile.5.6-apache b/compat/Dockerfile.5.6-apache
index ba8be70..92eff7b 100644
--- a/compat/Dockerfile.5.6-apache
+++ b/compat/Dockerfile.5.6-apache
@@ -275,6 +275,9 @@ ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/do
 
 RUN chmod +x /usr/local/bin/install-php-extensions
 
+# PEAR < 1.10.18 can't read pecl.php.net responses anymore.
+RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
+
 RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
diff --git a/compat/Dockerfile.5.6-fpm b/compat/Dockerfile.5.6-fpm
index ee8bd8f..f6e4c84 100644
--- a/compat/Dockerfile.5.6-fpm
+++ b/compat/Dockerfile.5.6-fpm
@@ -251,6 +251,9 @@ ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/do
 
 RUN chmod +x /usr/local/bin/install-php-extensions
 
+# PEAR < 1.10.18 can't read pecl.php.net responses anymore.
+RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
+
 RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \

From 30a29c1a7a53234b59ada3726ac6d302f27db4f7 Mon Sep 17 00:00:00 2001
From: Paolo Cuffiani <paolo.cuffiani@chialab.it>
Date: Wed, 21 Oct 2026 17:16:44 +0200
Subject: [PATCH 3/4] add retry logic for dealing with pecl transient errors

---
 Dockerfile                   | 10 ++++++----
 Dockerfile.alpine            |  6 ++++--
 compat/Dockerfile.5.6        |  6 ++++--
 compat/Dockerfile.5.6-apache |  6 ++++--
 compat/Dockerfile.5.6-fpm    |  6 ++++--
 dev/Dockerfile               |  4 +++-
 otel/Dockerfile              |  8 +++++---
 pcov/Dockerfile              |  4 +++-
 xhprof/Dockerfile            |  4 +++-
 9 files changed, 36 insertions(+), 18 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 11e7bf5..d3e2b87 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -21,7 +21,9 @@ RUN chmod +x /usr/local/bin/install-php-extensions
 # PEAR < 1.10.18 can't read pecl.php.net responses anymore.
 RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
 
-RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
       git \
@@ -60,10 +62,10 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
     # other extensions. Installing amqp on its own so that install-php-extensions
     # purges libssl1.0-dev before libssl-dev is installed for the rest.
     && if [ "${PHP_VERSION%%.*}" = "7" ]; then \
-        install-php-extensions amqp \
-        && install-php-extensions $(echo "$PHP_EXTENSIONS" | sed 's/amqp//'); \
+        retry install-php-extensions amqp \
+        && retry install-php-extensions $(echo "$PHP_EXTENSIONS" | sed 's/amqp//'); \
     else \
-        install-php-extensions $PHP_EXTENSIONS; \
+        retry install-php-extensions $PHP_EXTENSIONS; \
     fi \
     && if command -v a2enmod; then a2enmod rewrite; fi
 
diff --git a/Dockerfile.alpine b/Dockerfile.alpine
index 5fa4e50..fec2854 100644
--- a/Dockerfile.alpine
+++ b/Dockerfile.alpine
@@ -9,7 +9,9 @@ RUN chmod +x /usr/local/bin/install-php-extensions
 # PEAR < 1.10.18 can't read pecl.php.net responses anymore.
 RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
 
-RUN apk add --no-cache \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    apk add --no-cache \
       coreutils \
       curl \
       git \
@@ -43,7 +45,7 @@ RUN apk add --no-cache \
       5.6.*) PHP_EXTENSIONS="$PHP_EXTENSIONS mcrypt mysql";; \
       7.0.*|7.1.*) PHP_EXTENSIONS="$PHP_EXTENSIONS mcrypt";; \
     esac \
-    && install-php-extensions $PHP_EXTENSIONS \
+    && retry install-php-extensions $PHP_EXTENSIONS \
     && if command -v a2enmod; then a2enmod rewrite; fi
 
 # Install Composer.
diff --git a/compat/Dockerfile.5.6 b/compat/Dockerfile.5.6
index b296db7..6338d40 100644
--- a/compat/Dockerfile.5.6
+++ b/compat/Dockerfile.5.6
@@ -214,7 +214,9 @@ RUN chmod +x /usr/local/bin/install-php-extensions
 # PEAR < 1.10.18 can't read pecl.php.net responses anymore.
 RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
 
-RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
       git \
@@ -246,7 +248,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
       xsl \
       zip \
     " \
-    && install-php-extensions $PHP_EXTENSIONS
+    && retry install-php-extensions $PHP_EXTENSIONS
 
 # Install Composer.
 ENV PATH=$PATH:/root/composer/vendor/bin \
diff --git a/compat/Dockerfile.5.6-apache b/compat/Dockerfile.5.6-apache
index 92eff7b..365fb8f 100644
--- a/compat/Dockerfile.5.6-apache
+++ b/compat/Dockerfile.5.6-apache
@@ -278,7 +278,9 @@ RUN chmod +x /usr/local/bin/install-php-extensions
 # PEAR < 1.10.18 can't read pecl.php.net responses anymore.
 RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
 
-RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
       git \
@@ -310,7 +312,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
       xsl \
       zip \
     " \
-    && install-php-extensions $PHP_EXTENSIONS \
+    && retry install-php-extensions $PHP_EXTENSIONS \
     && if command -v a2enmod; then a2enmod rewrite; fi
 
 # Install Composer.
diff --git a/compat/Dockerfile.5.6-fpm b/compat/Dockerfile.5.6-fpm
index f6e4c84..dec3b1f 100644
--- a/compat/Dockerfile.5.6-fpm
+++ b/compat/Dockerfile.5.6-fpm
@@ -254,7 +254,9 @@ RUN chmod +x /usr/local/bin/install-php-extensions
 # PEAR < 1.10.18 can't read pecl.php.net responses anymore.
 RUN pear upgrade --force https://pear.php.net/get/PEAR-1.10.18.tgz
 
-RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    DEBIAN_FRONTEND=noninteractive apt-get update -q \
     && DEBIAN_FRONTEND=noninteractive apt-get install -qq -y \
       curl \
       git \
@@ -286,7 +288,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update -q \
       xsl \
       zip \
     " \
-    && install-php-extensions $PHP_EXTENSIONS
+    && retry install-php-extensions $PHP_EXTENSIONS
 
 # Install Composer.
 ENV PATH=$PATH:/root/composer/vendor/bin \
diff --git a/dev/Dockerfile b/dev/Dockerfile
index 9e7190e..63ff3f7 100644
--- a/dev/Dockerfile
+++ b/dev/Dockerfile
@@ -3,4 +3,6 @@ FROM ${BASE_IMAGE}
 LABEL maintainer="dev@chialab.io"
 
 # Install XDebug.
-RUN install-php-extensions xdebug
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    retry install-php-extensions xdebug
diff --git a/otel/Dockerfile b/otel/Dockerfile
index 4ad18fd..7ec51c9 100644
--- a/otel/Dockerfile
+++ b/otel/Dockerfile
@@ -2,8 +2,10 @@ ARG BASE_IMAGE=chialab/php:latest
 FROM ${BASE_IMAGE}
 LABEL maintainer="dev@chialab.io"
 
-RUN if [ "$(echo "$PHP_VERSION" | cut -d. -f1,2)" = "8.0" ]; then \
-        install-php-extensions protobuf opentelemetry-php/ext-opentelemetry@1.1.3; \
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    if [ "$(echo "$PHP_VERSION" | cut -d. -f1,2)" = "8.0" ]; then \
+        retry install-php-extensions protobuf opentelemetry-php/ext-opentelemetry@1.1.3; \
     else \
-        install-php-extensions protobuf opentelemetry-php/ext-opentelemetry@1.3.1; \
+        retry install-php-extensions protobuf opentelemetry-php/ext-opentelemetry@1.3.1; \
     fi
diff --git a/pcov/Dockerfile b/pcov/Dockerfile
index 34c589c..0137510 100644
--- a/pcov/Dockerfile
+++ b/pcov/Dockerfile
@@ -3,4 +3,6 @@ FROM ${BASE_IMAGE}
 LABEL maintainer="dev@chialab.io"
 
 # Install PCOV.
-RUN install-php-extensions pcov
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    retry install-php-extensions pcov
diff --git a/xhprof/Dockerfile b/xhprof/Dockerfile
index 6f6da20..4e54d32 100644
--- a/xhprof/Dockerfile
+++ b/xhprof/Dockerfile
@@ -3,4 +3,6 @@ FROM ${BASE_IMAGE}
 LABEL maintainer="dev@chialab.io"
 
 # Install XHProf.
-RUN install-php-extensions xhprof
+# retry: PECL sometimes replies "No releases available" on CI runners.
+RUN retry() { for i in 1 2 3; do "$@" && return; sleep 10; done; return 1; }; \
+    retry install-php-extensions xhprof

From 4c8fca02617fb90ca6ba092ef9868a0ff879dc66 Mon Sep 17 00:00:00 2001
From: Paolo Cuffiani <paolo.cuffiani@chialab.it>
Date: Wed, 21 Oct 2026 18:07:08 +0200
Subject: [PATCH 4/4] download PHP 5.6 sources from php.net distributions

secure.php.net/get/... now returns 404, and its TLS setup is rejected by
Stretch's GnuTLS (alert 70: protocol version).
---
 compat/Dockerfile.5.6        | 2 +-
 compat/Dockerfile.5.6-apache | 2 +-
 compat/Dockerfile.5.6-fpm    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/compat/Dockerfile.5.6 b/compat/Dockerfile.5.6
index 6338d40..975eb76 100644
--- a/compat/Dockerfile.5.6
+++ b/compat/Dockerfile.5.6
@@ -62,7 +62,7 @@ ENV PHP_LDFLAGS="-Wl,-O1 -Wl,--hash-style=both -pie"
 ENV GPG_KEYS 0BD78B5F97500D450838F95DFE857D9A90D90EC1 6E4F6AB321FDC07F2C332E3AC2BF0BC433CFC8B3
 
 ENV PHP_VERSION 5.6.40
-ENV PHP_URL="https://secure.php.net/get/php-5.6.40.tar.xz/from/this/mirror" PHP_ASC_URL="https://secure.php.net/get/php-5.6.40.tar.xz.asc/from/this/mirror"
+ENV PHP_URL="https://www.php.net/distributions/php-5.6.40.tar.xz" PHP_ASC_URL="https://www.php.net/distributions/php-5.6.40.tar.xz.asc"
 ENV PHP_SHA256="1369a51eee3995d7fbd1c5342e5cc917760e276d561595b6052b21ace2656d1c" PHP_MD5=""
 
 RUN set -xe; \
diff --git a/compat/Dockerfile.5.6-apache b/compat/Dockerfile.5.6-apache
index 365fb8f..adc9a7d 100644
--- a/compat/Dockerfile.5.6-apache
+++ b/compat/Dockerfile.5.6-apache
@@ -122,7 +122,7 @@ ENV PHP_LDFLAGS="-Wl,-O1 -Wl,--hash-style=both -pie"
 ENV GPG_KEYS 0BD78B5F97500D450838F95DFE857D9A90D90EC1 6E4F6AB321FDC07F2C332E3AC2BF0BC433CFC8B3
 
 ENV PHP_VERSION 5.6.40
-ENV PHP_URL="https://secure.php.net/get/php-5.6.40.tar.xz/from/this/mirror" PHP_ASC_URL="https://secure.php.net/get/php-5.6.40.tar.xz.asc/from/this/mirror"
+ENV PHP_URL="https://www.php.net/distributions/php-5.6.40.tar.xz" PHP_ASC_URL="https://www.php.net/distributions/php-5.6.40.tar.xz.asc"
 ENV PHP_SHA256="1369a51eee3995d7fbd1c5342e5cc917760e276d561595b6052b21ace2656d1c" PHP_MD5=""
 
 RUN set -xe; \
diff --git a/compat/Dockerfile.5.6-fpm b/compat/Dockerfile.5.6-fpm
index dec3b1f..4d70f67 100644
--- a/compat/Dockerfile.5.6-fpm
+++ b/compat/Dockerfile.5.6-fpm
@@ -63,7 +63,7 @@ ENV PHP_LDFLAGS="-Wl,-O1 -Wl,--hash-style=both -pie"
 ENV GPG_KEYS 0BD78B5F97500D450838F95DFE857D9A90D90EC1 6E4F6AB321FDC07F2C332E3AC2BF0BC433CFC8B3
 
 ENV PHP_VERSION 5.6.40
-ENV PHP_URL="https://secure.php.net/get/php-5.6.40.tar.xz/from/this/mirror" PHP_ASC_URL="https://secure.php.net/get/php-5.6.40.tar.xz.asc/from/this/mirror"
+ENV PHP_URL="https://www.php.net/distributions/php-5.6.40.tar.xz" PHP_ASC_URL="https://www.php.net/distributions/php-5.6.40.tar.xz.asc"
 ENV PHP_SHA256="1369a51eee3995d7fbd1c5342e5cc917760e276d561595b6052b21ace2656d1c" PHP_MD5=""
 
 RUN set -xe; \