container release for clang r328903 (#53)

* container release for clang r328903

- The newer clang version in this container bundles libc++ in release

- Update base image with security patch

- rbe-ubuntu16_04 is now officially supported

- set the LC_ALL to C.UTF-8
diff --git a/.bazelci/presubmit.yml b/.bazelci/presubmit.yml
index 0d9d73d..7389eb4 100644
--- a/.bazelci/presubmit.yml
+++ b/.bazelci/presubmit.yml
@@ -16,8 +16,8 @@
     - "//configs/ubuntu16_04_clang:ubuntu16_04-clang-0.3.0-bazel_0.13.0-autoconfig_test"
     - "//configs/ubuntu16_04_clang:msan-ubuntu16_04-clang-0.3.0-bazel_0.13.0-autoconfig_test"
     - "//container/rbe-debian8:toolchain-test"
+    - "//container/rbe-ubuntu16_04:toolchain-test"
     - "//container/experimental/rbe-debian9:toolchain-test"
-    - "//container/experimental/rbe-ubuntu16_04:toolchain-test"
     - "//container/test:bazel-toolchain-test"
   ubuntu1604:
     test_targets:
@@ -35,6 +35,6 @@
     - "//configs/ubuntu16_04_clang:ubuntu16_04-clang-0.3.0-bazel_0.13.0-autoconfig_test"
     - "//configs/ubuntu16_04_clang:msan-ubuntu16_04-clang-0.3.0-bazel_0.13.0-autoconfig_test"
     - "//container/rbe-debian8:toolchain-test"
+    - "//container/rbe-ubuntu16_04:toolchain-test"
     - "//container/experimental/rbe-debian9:toolchain-test"
-    - "//container/experimental/rbe-ubuntu16_04:toolchain-test"
     - "//container/test:bazel-toolchain-test"
diff --git a/WORKSPACE b/WORKSPACE
index 4c15ab3..3f10425 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -38,28 +38,28 @@
 
 container_pull(
     name = "debian8",
-    digest = "sha256:412ef4d53215ff4a95d275ad48fe5196cb51f4f96b99c05058054b3bdf9443c1",
+    digest = "sha256:943025384b0efebacf5473490333658dd190182e406e956ee4af65208d104332",
     registry = "gcr.io",
     repository = "cloud-marketplace/google/debian8",
 )
 
 container_pull(
     name = "debian9",
-    digest = "sha256:1b77b1d6cbc79af00b68050880b7d8cb24b7631fe366501bd55bf3986c744f03",
+    digest = "sha256:6b3aa04751aa2ac3b0c7be4ee71148b66d693ad212ce6d3244bd2a2a147f314a",
     registry = "gcr.io",
     repository = "cloud-marketplace/google/debian9",
 )
 
 container_pull(
     name = "ubuntu16_04",
-    digest = "sha256:c81e8f6bcbab8818fdbe2df6d367990ab55d85b4dab300931a53ba5d082f4296",
+    digest = "sha256:c5f4c61e72b1f872e16b64577f8abb041a237f28f0513d4d482fc06d2532bb81",
     registry = "gcr.io",
     repository = "cloud-marketplace/google/ubuntu16_04",
 )
 
 container_pull(
     name = "debian8-clang",
-    digest = "sha256:213da2494bb763f55363213db45d9bfa5eb906039fc02e6cb2e6637dc4917caf",
+    digest = "sha256:8bb65bf0a0da8be48bbac07ebe743805f3dc5259203e19517098162bd23a768f",
     registry = "gcr.io",
     repository = "cloud-marketplace/google/clang-debian8",
 )
diff --git a/container/build.sh b/container/build.sh
index 321180a..8c9356d 100755
--- a/container/build.sh
+++ b/container/build.sh
@@ -116,7 +116,7 @@
   parse_parameters $@
 
   PROJECT_ROOT=$(git rev-parse --show-toplevel)
-  if [[ "$DISTRO" == "debian8" ]]; then
+  if [[ "$DISTRO" != "debian9" ]]; then
     DIR="container/rbe-${DISTRO}"
   else
     DIR="container/experimental/rbe-${DISTRO}"
diff --git a/container/experimental/rbe-debian8/BUILD b/container/experimental/rbe-debian8/BUILD
index 59d0551..19b3d40 100644
--- a/container/experimental/rbe-debian8/BUILD
+++ b/container/experimental/rbe-debian8/BUILD
@@ -40,6 +40,9 @@
 container_image(
     name = "toolchain",
     base = "@debian8//image",
+    env = {
+        "LC_ALL ": "C.UTF-8",
+    }
     layers = [
         "base-ltl",
         "clang-ltl",
diff --git a/container/experimental/rbe-debian9/BUILD b/container/experimental/rbe-debian9/BUILD
index 41d9eb1..39e708c 100644
--- a/container/experimental/rbe-debian9/BUILD
+++ b/container/experimental/rbe-debian9/BUILD
@@ -41,6 +41,7 @@
         # PATH envvar is a special case, and currently only the one in the
         # topmost layer is set. So that we override it here to include all.
         "PATH": "$PATH:/usr/local/go/bin",
+        "LC_ALL ": "C.UTF-8",
     },
     language_layers = [
         "base-ltl",
diff --git a/container/rbe-debian8/BUILD b/container/rbe-debian8/BUILD
index 734adca..a922521 100644
--- a/container/rbe-debian8/BUILD
+++ b/container/rbe-debian8/BUILD
@@ -41,6 +41,7 @@
         # PATH envvar is a special case, and currently only the one in the
         # topmost layer is set. So that we override it here to include all.
         "PATH": "$PATH:/opt/python3.6/bin:/usr/local/go/bin",
+        "LC_ALL ": "C.UTF-8",
     },
     language_layers = [
         "base-ltl",
diff --git a/container/experimental/rbe-ubuntu16_04/BUILD b/container/rbe-ubuntu16_04/BUILD
similarity index 98%
rename from container/experimental/rbe-ubuntu16_04/BUILD
rename to container/rbe-ubuntu16_04/BUILD
index bc11d6c..f19d787 100644
--- a/container/experimental/rbe-ubuntu16_04/BUILD
+++ b/container/rbe-ubuntu16_04/BUILD
@@ -41,6 +41,7 @@
         # PATH envvar is a special case, and currently only the one in the
         # topmost layer is set. So that we override it here to include all.
         "PATH": "$PATH:/opt/python3.6/bin:/usr/local/go/bin",
+        "LC_ALL ": "C.UTF-8",
     },
     language_layers = [
         "base-ltl",
diff --git a/third_party/python/BUILD b/third_party/python/BUILD
index 2cdb940..1ae78de 100644
--- a/third_party/python/BUILD
+++ b/third_party/python/BUILD
@@ -54,7 +54,7 @@
 # https://github.com/GoogleCloudPlatform/python-runtime/blob/a8a3e8b2d3239c184843db818e34a06f12dc1190/build.sh#L155
 container_file_export(
     name = "debian8_python3",
-    image = "l.gcr.io/google/python@sha256:de9ab4346c65a611b1721aeae0633d897f56861a0cda0b40bc032771007ac914",
+    image = "l.gcr.io/google/python@sha256:5c5394b9d43b06188a866fd11df84ffb808a91495492a7d727dd258dedee796e",
     src_path = "/opt/python3.6",
     tags = ["manual"],
 )