From c8f12dbf520c6c3e37d9a986ef70e2aa926f4e19 Mon Sep 17 00:00:00 2001 From: Cian Johnston Date: Wed, 8 Jul 2026 15:05:47 +0100 Subject: [PATCH] fix(dogfood/coder): stop setting FIPS crypto-policies in workspace images (#27094) --- dogfood/coder/ubuntu-22.04/Dockerfile.base | 5 +---- dogfood/coder/ubuntu-26.04/Dockerfile.base | 5 +---- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/dogfood/coder/ubuntu-22.04/Dockerfile.base b/dogfood/coder/ubuntu-22.04/Dockerfile.base index 38abe9de8a..7485167548 100644 --- a/dogfood/coder/ubuntu-22.04/Dockerfile.base +++ b/dogfood/coder/ubuntu-22.04/Dockerfile.base @@ -42,7 +42,6 @@ RUN sed -i 's|http://archive.ubuntu.com/ubuntu/|http://mirrors.edge.kernel.org/u build-essential \ ca-certificates \ containerd.io \ - crypto-policies \ curl \ docker-ce \ docker-ce-cli \ @@ -107,9 +106,7 @@ RUN sed -i 's|http://archive.ubuntu.com/ubuntu/|http://mirrors.edge.kernel.org/u zsh \ zstd && \ # Delete package cache to avoid consuming space in layer - apt-get clean && \ - # Configure FIPS-compliant policies - update-crypto-policies --set FIPS + apt-get clean # Install Google Chrome directly from Google. Ubuntu 22.04 ships # chromium-browser as a snap-only package, which does not work in diff --git a/dogfood/coder/ubuntu-26.04/Dockerfile.base b/dogfood/coder/ubuntu-26.04/Dockerfile.base index c63f9d6bc0..871c358cdd 100644 --- a/dogfood/coder/ubuntu-26.04/Dockerfile.base +++ b/dogfood/coder/ubuntu-26.04/Dockerfile.base @@ -41,7 +41,6 @@ RUN sed -i 's|http://archive.ubuntu.com/ubuntu/|http://mirrors.edge.kernel.org/u build-essential \ ca-certificates \ containerd.io \ - crypto-policies \ curl \ docker-ce \ docker-ce-cli \ @@ -115,9 +114,7 @@ RUN sed -i 's|http://archive.ubuntu.com/ubuntu/|http://mirrors.edge.kernel.org/u docker-ce-cli \ docker-compose-plugin && \ # Delete package cache to avoid consuming space in layer - apt-get clean && \ - # Configure FIPS-compliant policies - update-crypto-policies --set FIPS + apt-get clean # Install Google Chrome directly from Google. Ubuntu 26.04 ships # chromium-browser as a snap-only package, which does not work in