update nodejs install in docker container

Author: williamstein

Dockerfile

@@ -14,10 +14,19 @@ USER root
 RUN apt-get update \
   && apt-get install -y git make cmake curl dpkg-dev m4 yasm texinfo python-is-python3 libtool tcl zip libncurses-dev
 
-# Install nodejs and pnpm
-RUN \
-     curl -sL https://deb.nodesource.com/setup_18.x | bash - \
-  && apt-get install -y nodejs \
+# Install nodejs and pnpm.
+# We specify a particular version of node.js for reproducibility, not because
+# it is needed for some reason.
+RUN  apt-get update \
+  && apt-get remove -y nodejs libnode72 nodejs-doc \
+  && apt-get install -y apt-utils ca-certificates curl gnupg \
+  && mkdir -p /etc/apt/keyrings \
+  && rm -f /etc/apt/keyrings/nodesource.gpg  \
+  && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+  && export NODE_MAJOR=18 \
+  && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
+  && apt-get update && apt-get install nodejs=18.17.1-1nodesource1 -y \
+  && apt-mark hold nodejs \
   && npm install -g npm pnpm
 
 # Get source code of python-wasm and build everything: