From 415ec55d55a6c630ef9d9a07716d8f4b38e23f0c Mon Sep 17 00:00:00 2001
From: oyyblin <4529189+oyyblin@users.noreply.github.com>
Date: Tue, 10 Mar 2026 13:49:29 -0400
Subject: [PATCH] fix(issuer): disable corepack and use node directly in
 runtime stage

Corepack tries to write to /.cache at startup, which fails when
running as non-root or with readOnlyRootFilesystem in Kubernetes.

Disable corepack in runtime stage and call node directly instead of
pnpm start (which is just node dist/common/server.cjs).
---
 apps/issuer/Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/issuer/Dockerfile b/apps/issuer/Dockerfile
index 9f624c2..6a8881a 100644
--- a/apps/issuer/Dockerfile
+++ b/apps/issuer/Dockerfile
@@ -21,10 +21,11 @@ RUN pnpm run -r build
 # RUN pnpm deploy --filter=issuer --prod /prod/issuer
 
 FROM base AS issuer
+RUN corepack disable
 # node_modules are symlinked to root directory, so we just copy the whole thing for now
 COPY --from=build /workspace /workspace
 # COPY --from=build /prod/issuer /prod/issuer
 WORKDIR /workspace/apps/issuer
 EXPOSE 8080 9090
-CMD [ "pnpm", "start" ]
+CMD [ "node", "dist/common/server.cjs" ]
 # docker build . --target issuer --tag issuer:latest