Docker Build Error: "corepack enable pnpm" Fails with Signature Verification Error

[rogoit]

Describe the bug

When building the Docker image for the bolt.diy project, the build process fails with an error related to the corepack enable pnpm command. The error message indicates that there is an issue with verifying the signature of the latest stable version of pnpm.
Steps to Reproduce:

Link to the Bolt URL that caused the error

http://localhost:5173/

Steps to reproduce

Clone the bolt.diy repository.
Navigate to the project directory.
Run the following command to build the Docker image:

docker build . --target bolt-ai-development

Expected behavior

Expected Behavior:
The Docker image should build successfully without any errors.
Actual Behavior:
The build process fails with the following error message:

Error: Cannot find matching keyid: {"signatures":[{"sig":"MEQCIHGqHbvc2zImUPEPFpT4grh6rMYslel+lAjFArx8+RUdAiBfnJA+bgmUvO5Lctfkq+46KKDQdx/8RhLPge3pA+EdHA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"keys":[{"expires":null,"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","keytype":"ecdsa-sha2-nistp256","scheme":"ecdsa-sha2-nistp256","key":"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1Olb3zMAFFxXKHiIkQO5cJ3Yhl5i6UPp+IhuteBJbuHcA5UogKo0EWtlWwW6KSaKoTNEYL7JlCQiVnkhBktUgg=="}]}

Screen Recording / Screenshot

No response

Platform

Operating System: Ubuntu
Docker Version: 27.5.1
Node.js Version: v21.7.3

Provider Used

No response

Model Used

No response

Additional context

Possible Solution:
To resolve the issue, we can modify the Dockerfile to install a specific version of pnpm instead of relying on corepack to fetch the latest stable version. Update the Dockerfile as follows:

-RUN corepack enable pnpm && pnpm install
+RUN npm install -g [email protected] && pnpm install

This works for me.

This change will install pnpm version 8.4.0 globally using npm and then use that specific version to install the project dependencies.
Additional Context:

The issue seems to be related to the signature verification process when fetching the latest stable version of pnpm using corepack.
The error occurs consistently when building the Docker image using the current Dockerfile.

Please let me know if you need any further information or if you have any suggestions for resolving this issue. Also would be a great honor to do a PR and contribute to this great project.

[steveannett]

According to a comment in the pnpm github this is an issue cause by corepack, here is a link to the bug report in corepack's github: nodejs/corepack#612

[rogoit]

@steveannett

...and this is a solution for an easier setup. So do we add it or ducumentate something for it to help people like to a better start?

[Madhushan1996]

@rogoit Did you manage to fix this?

[rogoit]

@Madhushan1996

I will open PR this evening and mention this issue here. See you
Roland

[danielo515]

Is any change in end user side required?

[Carcalto]

try to edit the Dockerfile found inside the Bolt folder ---

"RUN corepack enable pnpm && pnpm install"

--- by ---

"RUN npm install -g pnpm && pnpm install"

--- this in theory causes PNPM to be installed without depending on Corepack. If that doesn't work, just go back to the original

[jdros15]

Dockerfile.pdf

I asked ChatGPT to fix the "Dockerfile" file.
You can download it and replace before running the docker command. Worked for me.
(remove the .pdf)

[rogoit]

PR #1266

Thx for your passion.

[BaptisteCDC]

I correct on my side like this https://github.com/stackblitz-labs/bolt.diy/pull/1261/files

[rogoit]

@BaptisteCDC Based on my issue here. Please let me the contribution ;)

[BaptisteCDC]

yes no problem, I correct it yesterday to launch it on my azure web app, I hesitate between add this install or modify the package.json

[rogoit]

@BaptisteCDC so thanks a lot. Please give me final line. I also changed one const var to make it more simplified.

I will do the change direct and then push.

[rogoit]

@BaptisteCDC new PR #1266