Masaki Muranaka

Referring to https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#command-line-options , `--cookie-refresh` is available for OIDC. And the default value is `0` which means disabled. I think this is the root cause of this issue. Referring to...

A rough workaround for Keycloak admins: Increase `Access Token Lifespan` (and may `SSO Session Idle` also). 

After some tries and errors, I got a little bit better workaround. Set `cookieExpireSeconds` shorter than `Access Token Lifespan`. For example: If "10 minutes" was set as your `Access Token...

@tolusha Thank you for your link. In this case, I think we can fix this (and related) issue by setting reasonable `cookieExpreSeconds` https://github.com/eclipse/che/issues/22765#issuecomment-1951482787 , without envvars. I lived in my...

I suppose this has been fixed by #12827 ...?

@vdice Was this issue fixed on v2.12 ? Or re-tagged on v2.13 or later?

Ah, I see.

How about images provided by us PizzaFactory project ? We bake Debian, Ubuntu, and Alpine based images almost everyday. https://github.com/pizzafactory-contorno They are not UBI-like but only specific tools are contained...

> I think @olexii4 means that Che-Code should start in a vanilla ubuntu container, Hmm, but the quick fix that is shown by @olexii4 isn't a vanilla image... > so...

@RomanNikitenko I think I see the point of this issue. `che-code` should provide `/checode/checode-linux-libc/{ubuntu|deibian|brah-brah}`, right?