diff --git a/containers/Containerfile b/containers/Containerfile index e6b7d44..e8bef29 100644 --- a/containers/Containerfile +++ b/containers/Containerfile @@ -6,6 +6,17 @@ FROM registry.fedoraproject.org/fedora:41 ENV ANSIBLE_PYTHON_INTERPRETER=/usr/bin/python3 \ ANSIBLE_STDOUT_CALLBACK=debug +RUN sed -i \ + '/\[ evp_properties \]/a rh-allow-sha1-signatures = yes' \ + /etc/ssl/openssl.cnf + +RUN sed -i \ + -e 's/@SECLEVEL=2/@SECLEVEL=0/' \ + -e 's/rh-allow-sha1-signatures = no/rh-allow-sha1-signatures = yes/' \ + /usr/share/crypto-policies/DEFAULT/opensslcnf.txt + +RUN openssl s_client -connect mirrors.fedoraproject.org:443 + RUN dnf -y upgrade && \ dnf -y install ansible python3-pip && \ dnf clean all