From 3df11e3eb06b96f695553a8249aad826d6837638 Mon Sep 17 00:00:00 2001 From: Pi Web Agent Date: Fri, 10 Jul 2026 21:20:14 +0000 Subject: [PATCH] fix(docker): avoid FIPS solver prompts --- .changeset/steady-fips-docker-builds.md | 5 +++++ docker/internal/image/install-opensuse-base | 7 +++++++ 2 files changed, 12 insertions(+) create mode 100644 .changeset/steady-fips-docker-builds.md diff --git a/.changeset/steady-fips-docker-builds.md b/.changeset/steady-fips-docker-builds.md new file mode 100644 index 0000000..48c7cc9 --- /dev/null +++ b/.changeset/steady-fips-docker-builds.md @@ -0,0 +1,5 @@ +--- +"@jmfederico/pi-web": patch +--- + +Avoid interactive openSUSE FIPS crypto-policy solver conflicts during Docker image builds. diff --git a/docker/internal/image/install-opensuse-base b/docker/internal/image/install-opensuse-base index f82c251..3585e44 100755 --- a/docker/internal/image/install-opensuse-base +++ b/docker/internal/image/install-opensuse-base @@ -53,6 +53,13 @@ add_nodejs_repo() { # refreshes noisy or brittle when its signing key rolls independently. zypper --non-interactive modifyrepo --disable repo-openh264 >/dev/null 2>&1 || true +# Some Tumbleweed snapshots include the FIPS base pattern. This image does not +# enforce FIPS mode, and the pattern can turn normal package installs into +# interactive crypto-policy solver choices while repository metadata is in flux. +if rpm -q patterns-base-fips >/dev/null 2>&1; then + zypper --non-interactive remove patterns-base-fips +fi + add_nodejs_repo zypper --gpg-auto-import-keys --non-interactive refresh