diff --git a/base/Dockerfile.rhel9 b/base/Dockerfile.rhel9 index f5dee2077..e0b5b6ee8 100644 --- a/base/Dockerfile.rhel9 +++ b/base/Dockerfile.rhel9 @@ -1,5 +1,16 @@ +# Builder stage: Configure crypto-policies with post-quantum support +FROM registry.ci.openshift.org/ocp/4.22:base-rhel9 AS builder + +RUN dnf install -y --nodocs crypto-policies-scripts && \ + update-crypto-policies --set DEFAULT:PQ && \ + dnf clean all && rm -rf /var/cache/* + +# Final stage: Base RHEL9 image with PQ crypto-policies FROM registry.ci.openshift.org/ocp/4.22:base-rhel9 +# Copy crypto-policies configuration from builder stage +COPY --from=builder /etc/crypto-policies/ /etc/crypto-policies/ + # A ubi9 image will expose python3 as /usr/bin/python. It does not contain # python2. Subsequent layers should install if it needed. #