Files
chef/site-cookbooks/kosmos-nodejs/recipes/default.rb
T
raucao 4dc9c18d46 Move Node services onto patched releases for the eMudhra CA incident
Bump Node to patched releases (mastodon/sockethub 24.22.1, RTL 22.23.4).
Force the pinned major's latest patch in kosmos-nodejs: nodejs_install only
selects the repo major and a bare `package nodejs` never upgrades an already
installed package.

For hosts stuck on Node 16 (no patched 16.x), run the services with
NODE_OPTIONS=--use-openssl-ca so they use the patched system trust store:
ipfs-pinner, kredits-github, hubot botka/hal8000, sockethub.
2026-10-24 15:29:21 +02:00

18 lines
484 B
Ruby

#
# Cookbook Name:: kosmos-nodejs
# Recipe:: default
#
nodejs_install 'nodejs' do
install_method 'package'
version node["kosmos_nodejs"]["version"]
end
# nodejs_install only uses the version to select the Nodesource repo major, then
# runs a bare `package nodejs`, which Chef considers up to date for an already
# installed package. Force an upgrade so a newer patch of the same major (e.g.
# 22.23.1 -> 22.23.4) is actually installed.
package 'nodejs' do
action :upgrade
end