From e807d6a42e3bf47a63d41a72a1ce31fb7ac28776 Mon Sep 17 00:00:00 2001 From: Shaun Drong Date: Thu, 10 Sep 2026 13:20:07 -0700 Subject: [PATCH] Remove HashiCorp repo after Terraform installation Remove HashiCorp repository after installing Terraform to prevent future issues with key rotations. HashiCorp rotated its keys yesterday and it broken the Dev container until it was rebuilt with the new key. This is attempt to prevent that in the future as we only need the hashicorp stuff for terraform. --- Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile b/Dockerfile index 0b84140..c45dd70 100644 --- a/Dockerfile +++ b/Dockerfile @@ -53,6 +53,9 @@ RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \ sudo tee /etc/apt/sources.list.d/hashicorp.list > /dev/null \ && apt update \ && apt-get install -y awscli azure-cli terraform \ + # Terraform is installed; drop the HashiCorp repo so future apt-get updates + # (devcontainer features, developers) don't break when HashiCorp rotates keys. + && rm -f /etc/apt/sources.list.d/hashicorp.list /usr/share/keyrings/hashicorp-archive-keyring.gpg \ && apt-get clean -y && rm -rf /var/lib/apt/lists/* # Install ast-grep and yarn