From 8138a2d85ac1bace968566d1feca1590d67a779e Mon Sep 17 00:00:00 2001 From: Nat Welch Date: Wed, 21 Oct 2026 01:42:06 +0000 Subject: [PATCH 1/2] fix: upgrade ca-certificates and go for emudhra intermediate compromise --- Dockerfile | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1ffac8c..b1ed2a7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.27.2-trixie AS golang +FROM golang:1.27.3-trixie AS golang FROM golang AS yq ARG YQ_VERSION=v4.54.1 @@ -22,6 +22,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ gettext-base gh git git-lfs jq less moreutils openssh-client openssl \ procps python3 python3-pip python3-venv ripgrep rsync shellcheck \ silversearcher-ag tini tmux tree unzip vim wget xz-utils zip zoxide zsh \ + && apt-get install -y --no-install-recommends --only-upgrade ca-certificates \ && rm -rf /var/lib/apt/lists/* \ && ln -s /usr/bin/fdfind /usr/local/bin/fd @@ -64,7 +65,8 @@ ENV HOME=/data \ OPENCODE_CONFIG=/etc/opencode/opencode.json \ OPENCODE_CLIENT=app \ OPENCHAMBER_CHATS_DIR=/data/workspace/.chats \ - SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt + SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt \ + NODE_OPTIONS="--use-openssl-ca${NODE_OPTIONS:+ $NODE_OPTIONS}" COPY --from=config /build/runtime.json /etc/opencode/opencode.json COPY AGENTS.md /etc/opencode/AGENTS.md From eccf4e4f20783c64e6a9c406a227007540ddd8b0 Mon Sep 17 00:00:00 2001 From: Nat Welch Date: Wed, 21 Oct 2026 02:08:10 +0000 Subject: [PATCH 2/2] fix: apply system ca store to build stages too --- Dockerfile | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index b1ed2a7..b0952e9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -26,6 +26,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ && rm -rf /var/lib/apt/lists/* \ && ln -s /usr/bin/fdfind /usr/local/bin/fd +ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt \ + NODE_OPTIONS="--use-openssl-ca${NODE_OPTIONS:+ $NODE_OPTIONS}" + ARG OPENCODE_VERSION=2.0.32 ARG OPENCHAMBER_VERSION=2.4.0 ARG TYPESCRIPT_VERSION=7.0.2 @@ -64,9 +67,7 @@ ENV HOME=/data \ XDG_CACHE_HOME=/data/.cache \ OPENCODE_CONFIG=/etc/opencode/opencode.json \ OPENCODE_CLIENT=app \ - OPENCHAMBER_CHATS_DIR=/data/workspace/.chats \ - SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt \ - NODE_OPTIONS="--use-openssl-ca${NODE_OPTIONS:+ $NODE_OPTIONS}" + OPENCHAMBER_CHATS_DIR=/data/workspace/.chats COPY --from=config /build/runtime.json /etc/opencode/opencode.json COPY AGENTS.md /etc/opencode/AGENTS.md