Skip to content

import-file-stix (FIPS): include bzip2 runtime dependency for _bz2/stixmarx startup#6487

Closed
Copilot wants to merge 3 commits into
masterfrom
copilot/fix-permission-error-fips-images
Closed

import-file-stix (FIPS): include bzip2 runtime dependency for _bz2/stixmarx startup#6487
Copilot wants to merge 3 commits into
masterfrom
copilot/fix-permission-error-fips-images

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 21, 2026

FIPS import-file-stix images were still failing at startup after the earlier permission fix, now due to a missing shared library: libbz2.so.1 required by Python’s _bz2 module. This prevented the connector from booting in FIPS builds.

  • Runtime dependency correction (FIPS Docker image)

    • Updated internal-import-file/import-file-stix/Dockerfile_fips to install bzip2 so libbz2.so.1 is available at runtime.
    • Kept existing build-package cleanup unchanged so only build-time packages are removed; bzip2 remains installed.
  • Maintenance guardrail

    • Added an inline Dockerfile note clarifying that bzip2 is intentionally retained as a runtime dependency for _bz2 to avoid accidental future removal.
# Keep bzip2 at runtime to provide libbz2.so.1 required by Python's _bz2 module.
RUN apk --no-cache add ... bzip2 && \
    ... && \
    apk del git build-base gfortran musl-dev g++ openblas-dev

Copilot AI changed the title [WIP] Fix PermissionError with FIPS-compliant images in import stix file import-file-stix (FIPS): include bzip2 runtime dependency for _bz2/stixmarx startup May 21, 2026
Copilot AI requested a review from SamuelHassine May 21, 2026 22:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[import-stix-file]: PermissionError with FIPS-compliant images

2 participants