From 51aa8add0627050a1d136a39843f40168061b46f Mon Sep 17 00:00:00 2001 From: Bitnami Bot Date: Wed, 27 May 2026 02:56:21 +0200 Subject: [PATCH] [bitnami/node] Release 26.2.0-debian-12-r1 (#94010) Signed-off-by: Bitnami Bot --- bitnami/node/26/debian-12/Dockerfile | 12 +++--- ....2.0-0-linux-amd64-debian-12.tar.gz.sha256 | 1 + ....2.0-0-linux-arm64-debian-12.tar.gz.sha256 | 1 + ...14.5-2-linux-amd64-debian-12.tar.gz.sha256 | 1 + ...14.5-2-linux-arm64-debian-12.tar.gz.sha256 | 1 + .../prebuildfs/opt/bitnami/scripts/libfile.sh | 37 +++++++++++++++++++ 6 files changed, 47 insertions(+), 6 deletions(-) create mode 100644 bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-amd64-debian-12.tar.gz.sha256 create mode 100644 bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-arm64-debian-12.tar.gz.sha256 create mode 100644 bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-amd64-debian-12.tar.gz.sha256 create mode 100644 bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-arm64-debian-12.tar.gz.sha256 diff --git a/bitnami/node/26/debian-12/Dockerfile b/bitnami/node/26/debian-12/Dockerfile index 8cac91201e8c..30eed6bd7d29 100644 --- a/bitnami/node/26/debian-12/Dockerfile +++ b/bitnami/node/26/debian-12/Dockerfile @@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" ARG TARGETARCH LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-05-20T15:50:13Z" \ + org.opencontainers.image.created="2026-05-27T00:38:55Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/node/README.md" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/node" \ @@ -33,12 +33,12 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ for COMPONENT in "${COMPONENTS[@]}"; do \ if [ ! -f "${COMPONENT}.tar.gz" ]; then \ curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz" -O ; \ - curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz.sha256" -O ; \ fi ; \ - sha256sum -c "${COMPONENT}.tar.gz.sha256" ; \ + sha256sum -c "/opt/bitnami/checksums/${COMPONENT}.tar.gz.sha256" ; \ tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner ; \ - rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \ - done + rm -rf "${COMPONENT}".tar.gz ; \ + done ; \ + rm -rf /opt/bitnami/checksums ; RUN apt-get update && apt-get upgrade -y && \ apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true @@ -52,7 +52,7 @@ RUN /opt/bitnami/scripts/node/postunpack.sh ENV APP_VERSION="26.2.0" \ BITNAMI_APP_NAME="node" \ COREPACK_HOME="/opt/bitnami/node/corepack" \ - IMAGE_REVISION="0" \ + IMAGE_REVISION="1" \ PATH="/opt/bitnami/python/bin:/opt/bitnami/node/bin:$PATH" EXPOSE 3000 diff --git a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-amd64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..ea55ff17a2a0 --- /dev/null +++ b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-amd64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +965606761800058fda498e19e4f7f15027d0c9f62d541886752673012c8ef825 node-26.2.0-0-linux-amd64-debian-12.tar.gz diff --git a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-arm64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..9b6c20ac3ba9 --- /dev/null +++ b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/node-26.2.0-0-linux-arm64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +c72fa27ee501786c6bb7b9bb5bbde935ce767a029ea0e09d11208f3245c5c8f2 node-26.2.0-0-linux-arm64-debian-12.tar.gz diff --git a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-amd64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..5a6ff85bb43e --- /dev/null +++ b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-amd64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +873f755a79e805bb950da235f991af2edbe89c23dad4b13cd33b089e4f1b7ff6 python-3.14.5-2-linux-amd64-debian-12.tar.gz diff --git a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-arm64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..6c3f3de285fd --- /dev/null +++ b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/checksums/python-3.14.5-2-linux-arm64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +be023b204af7213748a2bae639e1eec89ce42238b376d68d6262ad364f49c1d3 python-3.14.5-2-linux-arm64-debian-12.tar.gz diff --git a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh index 1c69e0e48a5d..335c1c7c9ef7 100644 --- a/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh +++ b/bitnami/node/26/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh @@ -139,3 +139,40 @@ wait_for_log_entry() { return 1 fi } + +######################## +# Creates a secure temporary file containing the provided secret +# Arguments: +# $1 - secret to write to the temporary file +# Returns: +# String +######################### +credential_to_temp_file() { + local secret="$1" + local tmp_file + + # Use mktemp with a specific prefix for easier debugging if something lingers + if ! tmp_file=$(mktemp "${TMPDIR:-/tmp}/at.cred.XXXXXXXX"); then + echo "Error: Failed to create temp file" >&2 + return 1 + fi + + # Restrict permissions before writing the secret + chmod 0600 "$tmp_file" + # Write secret and ensure it's flushed to disk + printf "%s" "$secret" > "$tmp_file" + # Output the filename so the caller can capture it + echo "$tmp_file" +} + +######################## +# Cleans up temporary files created by credential_to_temp_file +# Arguments: +# None +# Returns: +# None +######################### +cleanup_credentials() { + debug "Cleaning up temporary files containing credentials" + rm -rf "${TMPDIR:-/tmp}"/at.cred.* +}