From c01e897c94df5ec8da9cac4eb3992eb7f290513e Mon Sep 17 00:00:00 2001 From: Kevin Wang Date: Wed, 2 Sep 2026 06:53:01 -0700 Subject: [PATCH] fix(ingress): normalize requirements file mode --- custom-domain/dstack-ingress/Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/custom-domain/dstack-ingress/Dockerfile b/custom-domain/dstack-ingress/Dockerfile index 354ccf0..369c9a6 100644 --- a/custom-domain/dstack-ingress/Dockerfile +++ b/custom-domain/dstack-ingress/Dockerfile @@ -62,7 +62,8 @@ RUN mkdir -p \ # installation from PyPI would leave certbot (which handles TLS private keys) # outside the measured image. Keep versions explicit; update this list only # together with a new image build and digest. -COPY requirements.txt /tmp/requirements.txt +# Normalize the mode so the image digest does not depend on the checkout umask. +COPY --chmod=644 requirements.txt /tmp/requirements.txt ENV PYTHONDONTWRITEBYTECODE=1 \ PYTHONHASHSEED=0 \ SOURCE_DATE_EPOCH=0