tools.func: configure pnpm to allow all build scripts for LXC container environments

ct/stirling-pdf.sh

@@ -38,11 +38,6 @@ function update_script() {
     PYTHON_VERSION="3.12" setup_uv
     JAVA_VERSION="25" setup_java
 
-    msg_info "Patching Native Libraries for LXC Compatibility"
-    ensure_dependencies patchelf
-    find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
-    msg_ok "Patched Native Libraries"
-
     msg_info "Stopping Services"
     systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"

install/stirling-pdf-install.sh

@@ -27,8 +27,7 @@ $STD apt install -y \
   fonts-urw-base35 \
   qpdf \
   poppler-utils \
-  jbig2 \
-  patchelf
+  jbig2
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
@@ -116,10 +115,6 @@ EOF
 fi
 msg_ok "Created Environment Variables"
 
-msg_info "Patching Native Libraries for LXC Compatibility"
-find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
-msg_ok "Patched Native Libraries"
-
 msg_info "Refreshing Font Cache"
 $STD fc-cache -fv
 msg_ok "Font Cache Updated"

misc/tools.func

@@ -7657,6 +7657,12 @@ setup_nodejs() {
     fi
   fi
 
+  # pnpm v10+ blocks dependency build scripts by default (ERR_PNPM_IGNORED_BUILDS).
+  # In a container environment all installed packages are trusted, so we enable builds globally.
+  if command -v pnpm >/dev/null 2>&1; then
+    pnpm config set --global dangerouslyAllowAllBuilds true >/dev/null 2>&1 || true
+  fi
+
   if [[ "$NODE_COREPACK_ENABLE" == "1" ]] && ((wants_corepack)) && command -v corepack >/dev/null 2>&1; then
     msg_info "Enabling corepack"
     if $STD corepack enable 2>/dev/null; then