From 03c1458fd8b3b079e99e6ca0dc8f6f891a8cc901 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Verstraeten?= <cedric@verstraeten.io>
Date: Tue, 1 Sep 2026 15:45:47 +0200
Subject: [PATCH] Use frozen lockfile for UI yarn install

Stop deleting yarn.lock before install and instead run yarn with --frozen-lockfile to ensure reproducible UI builds in Docker.
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index f34adbd..ec41744 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -81,8 +81,8 @@ RUN apk update && apk upgrade --available && sync
 
 RUN mkdir -p /go/src/github.com/kerberos-io/agent/machinery/www
 COPY ui /go/src/github.com/kerberos-io/agent/ui
-RUN cd /go/src/github.com/kerberos-io/agent/ui && rm -rf yarn.lock && yarn config set network-timeout 300000 && \
-	yarn && yarn build
+RUN cd /go/src/github.com/kerberos-io/agent/ui && yarn config set network-timeout 300000 && \
+	yarn --frozen-lockfile && yarn build
 
 ####################################
 # Let's create a /dist folder containing just the files necessary for runtime.