From c7c0bcdb552a1e8f080abdf299e544d82ce9882a Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Wed, 21 Oct 2026 06:03:25 -0700 Subject: docker: ghcr.io/coinos/bun, oven/bun with the distrusted emSign G3 root swapped out bun-distrust.ts now carries the root's DER itself instead of finding it through tls.getCACertificates, so it works on any bun image. Co-Authored-By: Claude Opus 5.5 --- docker/bun.Dockerfile | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 docker/bun.Dockerfile (limited to 'docker/bun.Dockerfile') diff --git a/docker/bun.Dockerfile b/docker/bun.Dockerfile new file mode 100644 index 00000000..8ca4aefb --- /dev/null +++ b/docker/bun.Dockerfile @@ -0,0 +1,9 @@ +# oven/bun with distrusted roots taken out of its built-in store (bun-distrust.ts) +# docker build -f docker/bun.Dockerfile --build-arg BUN_VERSION=1.4.3 -t ghcr.io/coinos/bun:1.4.3 docker/ +ARG BUN_VERSION=1.4.3 +FROM oven/bun:${BUN_VERSION} + +COPY bun-distrust.ts /tmp/ +RUN cp /usr/local/bin/bun /tmp/bun \ + && /tmp/bun /tmp/bun-distrust.ts /usr/local/bin/bun \ + && rm /tmp/bun /tmp/bun-distrust.ts -- cgit v1.2.3