From 08e81869b4519b7c78d0f2aaaf554849bf7a16e0 Mon Sep 17 00:00:00 2001
From: Codewriter90x <baron_luca@hotmail.it>
Date: Thu, 9 Jul 2026 17:49:36 +0200
Subject: [PATCH] fix(docker): add missing kerberos runtime dependency

---
 src/OpenCashFlow.API/Dockerfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/OpenCashFlow.API/Dockerfile b/src/OpenCashFlow.API/Dockerfile
index 934eb58..d4af6fe 100644
--- a/src/OpenCashFlow.API/Dockerfile
+++ b/src/OpenCashFlow.API/Dockerfile
@@ -3,6 +3,12 @@ FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS base
 WORKDIR /app
 EXPOSE 8080
 
+# Npgsql can load the native GSSAPI/Kerberos library during PostgreSQL connection setup.
+# The ASP.NET runtime image is minimal, so install the small runtime dependency explicitly.
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends libgssapi-krb5-2 \
+    && rm -rf /var/lib/apt/lists/*
+
 FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
 WORKDIR /src