fix: add missing ca-certificates bundle to avoid crash

This commit is contained in:
Harshit Jain 2026-02-11 16:25:45 +00:00
parent 1929d4a27c
commit 4f09b0fbb5
3 changed files with 4 additions and 4 deletions

View file

@ -60,7 +60,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
USER root
# Install runtime dependencies (with retry for transient APK mirror errors)
RUN for i in 1 2 3; do apk add --no-cache bash openssl tzdata nodejs npm libsndfile && break || sleep 5; done && \
RUN for i in 1 2 3; do apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm libsndfile && break || sleep 5; done && \
npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \
# SECURITY FIX: npm bundles tar, glob, and brace-expansion at multiple nested
# levels inside its dependency tree. `npm install -g <pkg>` only creates a

View file

@ -64,7 +64,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
USER root
# Install runtime dependencies (with retry for transient APK mirror errors)
RUN for i in 1 2 3; do apk add --no-cache bash openssl tzdata nodejs npm libsndfile && break || sleep 5; done && \
RUN for i in 1 2 3; do apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm libsndfile && break || sleep 5; done && \
npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \
GLOBAL="$(npm root -g)" && \
find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \
@ -124,7 +124,7 @@ RUN sed -i 's/\r$//' docker/entrypoint.sh && chmod +x docker/entrypoint.sh
RUN sed -i 's/\r$//' docker/prod_entrypoint.sh && chmod +x docker/prod_entrypoint.sh
EXPOSE 4000/tcp
RUN apk add --no-cache supervisor
RUN for i in 1 2 3; do apk add --no-cache supervisor && break || sleep 5; done
COPY docker/supervisord.conf /etc/supervisord.conf
# # Set your entrypoint and command

View file

@ -124,7 +124,7 @@ RUN for i in 1 2 3; do \
apk upgrade --no-cache && break || sleep 5; \
done \
&& for i in 1 2 3; do \
apk add --no-cache bash openssl tzdata nodejs npm supervisor && break || sleep 5; \
apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm supervisor && break || sleep 5; \
done \
&& npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 \
&& GLOBAL="$(npm root -g)" \