julien/apf_portal
1
0
Fork 0
Code Issues 1 Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix(ci): pass NODE_OPTIONS=--use-system-ca to clear grpc-tools tls install #199

Merged
julien merged 1 commits from fix/ci-grpc-tools-node-system-ca into main 2026-05-20 10:23:39 +02:00
Conversation 0 Commits 1 Files Changed 2
+19

1 Commits

Author SHA1 Message Date
Julien Gautier c419a73bf5 fix(ci): pass NODE_OPTIONS=--use-system-ca to clear grpc-tools tls install
CI / scan (pull_request) Failing after 1m22s
Details
CI / check (pull_request) Failing after 1m27s
Details
CI / commits (pull_request) Failing after 1m31s
Details
CI / perf (pull_request) Failing after 14s
Details
CI / a11y (pull_request) Failing after 1m36s
Details
Docs site / build (pull_request) Failing after 1m41s
Details 
The CI runner (catthehacker/ubuntu:act-22.04) fails `pnpm install
--frozen-lockfile` because grpc-tools' postinstall downloads a
precompiled protoc archive from node-precompiled-binaries.grpc.io
and Node 24's bundled CA set cannot verify the chain there.

Node 24 itself surfaces the fix in the error message: pass
`--use-system-ca` so Node consults the OS CA store in addition to
its bundled set. The runner image carries the standard Ubuntu
`ca-certificates` bundle, which validates the impacted chains.

Applied at workflow scope (env: block) on both ci.yml and
docs-site.yml so every Node child (pnpm itself plus every
postinstall it spawns) inherits the option. Future native deps
that hit the same TLS rejection will benefit automatically.
 2026-05-20 10:15:09 +02:00