ui package upgrades

.github/workflows/ui.yml

@@ -44,7 +44,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 16
+          node-version: 24
           cache: 'npm'
           cache-dependency-path: 'ui/package-lock.json'
 

ui/Dockerfile

@@ -17,7 +17,7 @@
 
 # Build example: docker build -t <name> .
 
-FROM node:14-bullseye AS build
+FROM node:24-bookworm AS build
 
 LABEL Description="Apache CloudStack UI; Modern role-base progressive UI for Apache CloudStack"
 LABEL Vendor="Apache.org"

ui/README.md

@@ -63,10 +63,6 @@ To use the community Simulator QA server you can do this:
 
     echo "CS_URL=https://qa.cloudstack.cloud" > .env.local
 
-This may be required for newer npm versions:
-
-    export NODE_OPTIONS=--openssl-legacy-provider
-
 Build and run:
 
     npm run serve

ui/node-options-wrapper.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+# Webpack 4 hashes with MD4, which OpenSSL 3 (Node 17+) no longer provides
+# by default, causing ERR_OSSL_EVP_UNSUPPORTED. --openssl-legacy-provider
+# restores it, but the flag doesn't exist before Node 17 and node refuses to
+# even start with it set in NODE_OPTIONS, so only add it when needed.
+NODE_MAJOR=$(node -p "process.versions.node.split('.')[0]")
+if [ "$NODE_MAJOR" -ge 17 ]; then
+  export NODE_OPTIONS="--openssl-legacy-provider${NODE_OPTIONS:+ ${NODE_OPTIONS}}"
+fi
+exec "$@"