fix(auth): login 500 — DataProtection key ring on root-owned volume (#37)

2026-07-04 16:52:56 +02:00
parent eccf66eaed
commit 04ff72097b
2 changed files with 20 additions and 0 deletions
@@ -15,6 +15,14 @@ RUN dotnet publish src/InboxIntel.Api/InboxIntel.Api.csproj -c Release -o /app/p

 FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
 WORKDIR /app
+
+# The slim aspnet:10.0 image dropped libgssapi_krb5, which Npgsql tries to load during
+# connection negotiation ("Cannot load library libgssapi_krb5.so.2"). Harmless for password
+# auth but noisy and a latent failure on some paths — install the Kerberos runtime lib.
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends libgssapi-krb5-2 \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY --from=build /app/publish .

 # V-12: run as the non-root 'app' user shipped in the .NET 8 images. Pre-create the