From 917ef8f9c38e33990c046a1998373b112004063a Mon Sep 17 00:00:00 2001
From: Bayan Taani <btaani@redhat.com>
Date: Tue, 6 Oct 2026 15:39:00 +0200
Subject: [PATCH] Enable DEFAULT:PQ crypto policy for PQC readiness

---
 Dockerfile | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index a56e3eb45..0713f13a4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,7 +10,13 @@ WORKDIR /opt
 
 RUN git update-index --refresh; make build OS=${TARGETOS} ARCH=${TARGETARCH}
 
-FROM alpine:3.23 as runner
+FROM registry.access.redhat.com/ubi9/ubi-minimal as policy-builder
+RUN microdnf install -y crypto-policies-scripts && \
+    update-crypto-policies --set DEFAULT:PQ && \
+    microdnf clean all
+
+FROM registry.access.redhat.com/ubi9/ubi-minimal
+COPY --from=policy-builder /etc/crypto-policies/ /etc/crypto-policies/
 
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /opt/observatorium-api /bin/observatorium-api