github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 17:59:23 -04:00
Code Issues Projects Releases Packages Wiki Activity

Prevent incompatable upgrade of crypto-policies (#82475)

Browse source 
An upgrade of crypto-policies is incompatible with libnss as it removes
`/usr/bin/update-crypto-policies` being used.

A follow-up issue has been created to track removing this pinning https://github.com/elastic/kibana/issues/82474

Signed-off-by: Tiago Costa <tiago.costa@elastic.co>
Signed-off-by: Tyler Smalley <tyler.smalley@elastic.co>
This commit is contained in:
Tyler Smalley 2020-11-03 13:00:35 -08:00 • committed by GitHub
parent 39ce0cdd11
commit eeb314e2db
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/dev/build/tasks/os_packages/docker_generator/templates/Dockerfile
View file

@ -43,7 +43,17 @@ RUN chmod -R g=u /usr/share/kibana
FROM {{{baseOSImage}}}
EXPOSE 5601
{{#ubi}}
# https://github.com/rpm-software-management/microdnf/issues/50
RUN mkdir -p /run/user/$(id -u)
# crypto-policies not currently compatible with libnss :sadpanda:
RUN printf "[main]\nexclude=crypto-policies" > /etc/dnf/dnf.conf
{{/ubi}}
RUN for iter in {1..10}; do \
# update microdnf to have exclusion feature for dnf configuration
{{packageManager}} update microdnf --setopt=tsflags=nodocs -y && \
{{packageManager}} update --setopt=tsflags=nodocs -y && \
{{packageManager}} install --setopt=tsflags=nodocs -y \
fontconfig freetype shadow-utils libnss3.so {{#ubi}}findutils{{/ubi}} && \