openclaw - 💡(How to fix) Fix Remove NodeSource pipe-to-bash in test Dockerfile [1 comments, 1 participants]

TL;DR

Use the official node:24-bookworm image instead of installing Node via NodeSource in the scripts/docker/install-sh-nonroot/Dockerfile.

Guidance

• Replace the line curl -fsSL https://deb.nodesource.com/setup_24.x | bash - with FROM node:24-bookworm to use the official Node image.
• Verify that the Dockerfile builds correctly and the resulting image has the expected Node version.
• Remove any unnecessary dependencies or setup scripts related to NodeSource.
• Test the updated Dockerfile to ensure it works as expected in the test/utility environment.

Example

# Replace the existing Dockerfile content with:
FROM node:24-bookworm

Notes

This fix only applies to the scripts/docker/install-sh-nonroot/Dockerfile and does not affect the production environment.

Recommendation

Apply workaround: Use the official node:24-bookworm image to avoid potential security risks associated with using NodeSource.