From 98bb5a3fee03a2dd1dd1218877ece06b19e5fdd3 Mon Sep 17 00:00:00 2001
From: dev-qwen2 <dev-qwen2@disinto.local>
Date: Fri, 17 Apr 2026 16:08:41 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20[nomad-step-4]=20S4-fix-3=20=E2=80=94=20?=
 =?UTF-8?q?Dockerfile=20COPY=20sops=20fails=20on=20fresh=20clone=20(downlo?=
 =?UTF-8?q?ad=20instead)=20(#974)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker/agents/Dockerfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docker/agents/Dockerfile b/docker/agents/Dockerfile
index 1bcba89..082443e 100644
--- a/docker/agents/Dockerfile
+++ b/docker/agents/Dockerfile
@@ -7,8 +7,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 # Pre-built binaries (copied from docker/agents/bin/)
 # SOPS — encrypted data decryption tool
-COPY docker/agents/bin/sops /usr/local/bin/sops
-RUN chmod +x /usr/local/bin/sops
+# Download sops binary (replaces manual COPY of vendored binary)
+ARG SOPS_VERSION=3.9.4
+RUN curl -fsSL "https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux.amd64" \
+    -o /usr/local/bin/sops && chmod +x /usr/local/bin/sops
 
 # tea CLI — official Gitea/Forgejo CLI for issue/label/comment operations
 COPY docker/agents/bin/tea /usr/local/bin/tea
-- 
2.49.1