We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e1c2532 commit c56b0faCopy full SHA for c56b0fa
1 file changed
ee/apps/account-service/Dockerfile
@@ -88,6 +88,11 @@ WORKDIR /app/ee/apps/${SERVICE}
88
89
RUN yarn workspaces focus --production
90
91
+# Build a glibc-compatible bcrypt package to be copied into the FIPS runtime image.
92
+FROM node:22.22.1-bookworm-slim AS fips-bcrypt
93
+WORKDIR /tmp/fips-bcrypt
94
+RUN npm init -y && npm install bcrypt@5.1.1 --omit=dev
95
+
96
FROM node:22.16.0-alpine3.21 AS release-standard
97
98
ARG SERVICE
@@ -121,6 +126,8 @@ ARG SERVICE
121
126
ENV NODE_ENV=production \
122
127
PORT=3000
123
128
COPY --chown=node:node --from=builder /app /app
129
+COPY --chown=node:node --from=fips-bcrypt /tmp/fips-bcrypt/node_modules/bcrypt /app/node_modules/bcrypt
130
124
131
WORKDIR /app/ee/apps/${SERVICE}
125
132
USER node
133
EXPOSE 3000 9458
0 commit comments