Skip to content

fix: allow Alpine package updates in CircleCI Docker builds #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jmgasper merged 1 commit into from
Oct 30, 2026
Merged

fix: allow Alpine package updates in CircleCI Docker builds #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ ARG PNPM_VERSION=11.15.1

FROM node:${NODE_VERSION}-alpine3.24 AS build

ARG PNPM_VERSION

RUN apk upgrade --no-cache \
&& apk add --no-cache bash

Expand All @@ -24,12 +26,13 @@ ARG OPENSSL_VERSION=3.5.8-r0

# Use Alpine's dynamically linked Node.js package so the runtime receives the
# patched system OpenSSL libraries without carrying npm or Node.js headers.
# Keep minimum patched versions while allowing Alpine repository updates.
RUN apk upgrade --no-cache \
&& apk add --no-cache \
bash \
"libcrypto3=${OPENSSL_VERSION}" \
"libssl3=${OPENSSL_VERSION}" \
"nodejs-current=${ALPINE_NODE_VERSION}" \
"libcrypto3>=${OPENSSL_VERSION}" \
"libssl3>=${OPENSSL_VERSION}" \
"nodejs-current>=${ALPINE_NODE_VERSION}" \
&& addgroup -S -g 10001 app \
&& adduser -S -D -H -h /app -u 10001 -G app app

Expand Down
5 changes: 3 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,9 @@ Group API built on modern frameworks for managing all group-related Topcoder nee
Use Node.js 26.5.1 and pnpm 11.15.1. Run `nvm use` in this project before running pnpm commands.

The production image runs as the unprivileged `app` user. Its Alpine 3.24
runtime installs Node.js 26.5.1 and the patched system OpenSSL 3.5.8 packages;
the Node.js build toolchain and npm are not copied into the runtime image.
runtime installs Node.js >=26.5.1 and system OpenSSL >=3.5.8 from the Alpine
repositories, allowing package updates while retaining the minimum patched
versions. The Node.js build toolchain and npm are not copied into the runtime image.

## Project setup

Expand Down
Loading