fix(docker): avoid FIPS solver prompts

This commit is contained in:
Pi Web Agent
2026-07-10 21:20:14 +00:00
parent 8f1b6b91ab
commit 3df11e3eb0
2 changed files with 12 additions and 0 deletions
+5
View File
@@ -0,0 +1,5 @@
---
"@jmfederico/pi-web": patch
---
Avoid interactive openSUSE FIPS crypto-policy solver conflicts during Docker image builds.
@@ -53,6 +53,13 @@ add_nodejs_repo() {
# refreshes noisy or brittle when its signing key rolls independently. # refreshes noisy or brittle when its signing key rolls independently.
zypper --non-interactive modifyrepo --disable repo-openh264 >/dev/null 2>&1 || true zypper --non-interactive modifyrepo --disable repo-openh264 >/dev/null 2>&1 || true
# Some Tumbleweed snapshots include the FIPS base pattern. This image does not
# enforce FIPS mode, and the pattern can turn normal package installs into
# interactive crypto-policy solver choices while repository metadata is in flux.
if rpm -q patterns-base-fips >/dev/null 2>&1; then
zypper --non-interactive remove patterns-base-fips
fi
add_nodejs_repo add_nodejs_repo
zypper --gpg-auto-import-keys --non-interactive refresh zypper --gpg-auto-import-keys --non-interactive refresh