build: use Podman friendly syntax
What the developer wrote
Authored by Sjors Provoost
build: use Podman friendly syntax
What changed, and why it matters
This commit changes two Dockerfiles used to build the project. It removes a global setting that forced every command to run in bash, and instead makes one specific command explicitly use bash. The stated reason is to make the build files work better with Podman, an alternative container tool. There is no security-relevant change here.
No security action needed. Review as a normal build-maintenance change if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch removes SHELL ["/bin/bash", "-c"] from contrib/build-wine.Dockerfile and contrib/build.Dockerfile. In build.Dockerfile, the single RUN command that relied on bash features (eval and command substitution) is now wrapped with /bin/bash -c '...'. This is a build-system compatibility change for Podman and does not alter installed packages, network exposure, permissions, secrets handling, or runtime behavior of the produced artifacts.
Changed components
contrib/build-wine.Dockerfilecontrib/build.DockerfileInspect captured patch +1 / −5
diff --git a/contrib/build-wine.Dockerfile b/contrib/build-wine.Dockerfile
index 335b580..d781dfd 100644
--- a/contrib/build-wine.Dockerfile
+++ b/contrib/build-wine.Dockerfile
@@ -1,7 +1,5 @@
FROM debian:bookworm-slim
-SHELL ["/bin/bash", "-c"]
-
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update
RUN apt-get install -y \
diff --git a/contrib/build.Dockerfile b/contrib/build.Dockerfile
index 4e10253..766d5b0 100644
--- a/contrib/build.Dockerfile
+++ b/contrib/build.Dockerfile
@@ -1,7 +1,5 @@
FROM debian:bookworm-slim
-SHELL ["/bin/bash", "-c"]
-
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update
RUN apt-get install -y \
@@ -38,7 +36,7 @@ COPY contrib/reproducible-python.diff /opt/reproducible-python.diff
ENV PYTHON_CONFIGURE_OPTS="--enable-shared"
ENV BUILD_DATE="Jan 1 2019"
ENV BUILD_TIME="00:00:00"
-RUN eval "$(pyenv init --path)" && eval "$(pyenv virtualenv-init -)" && cat /opt/reproducible-python.diff | pyenv install -kp 3.9.19
+RUN /bin/bash -c 'eval "$(pyenv init --path)" && eval "$(pyenv virtualenv-init -)" && cat /opt/reproducible-python.diff | pyenv install -kp 3.9.19'
ENV LC_ALL=C.UTF-8
ENV LANG=C.UTF-8
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.