aboutsummaryrefslogtreecommitdiffstats
path: root/docker/bun.Dockerfile
diff options
context:
space:
mode:
authorAdam Soltys <[email protected]>2026-10-21 06:03:25 -0700
committerAdam Soltys <[email protected]>2026-10-21 06:03:25 -0700
commitc7c0bcdb552a1e8f080abdf299e544d82ce9882a (patch)
tree41ce40603310ce3fa2ec0544ebe843fdadc5ed68 /docker/bun.Dockerfile
parentd84a2c8c21124cfc3326ae8b4dd1f6afeb5fde6d (diff)
downloadcoinos-server-master.tar.gz
coinos-server-master.zip
docker: ghcr.io/coinos/bun, oven/bun with the distrusted emSign G3 root swapped outHEADmaster
bun-distrust.ts now carries the root's DER itself instead of finding it through tls.getCACertificates, so it works on any bun image. Co-Authored-By: Claude Opus 5.5 <[email protected]>
Diffstat (limited to 'docker/bun.Dockerfile')
-rw-r--r--docker/bun.Dockerfile9
1 files changed, 9 insertions, 0 deletions
diff --git a/docker/bun.Dockerfile b/docker/bun.Dockerfile
new file mode 100644
index 00000000..8ca4aefb
--- /dev/null
+++ b/docker/bun.Dockerfile
@@ -0,0 +1,9 @@
+# oven/bun with distrusted roots taken out of its built-in store (bun-distrust.ts)
+# docker build -f docker/bun.Dockerfile --build-arg BUN_VERSION=1.4.3 -t ghcr.io/coinos/bun:1.4.3 docker/
+ARG BUN_VERSION=1.4.3
+FROM oven/bun:${BUN_VERSION}
+
+COPY bun-distrust.ts /tmp/
+RUN cp /usr/local/bin/bun /tmp/bun \
+ && /tmp/bun /tmp/bun-distrust.ts /usr/local/bin/bun \
+ && rm /tmp/bun /tmp/bun-distrust.ts