Error generating project graph in linux

Current Behavior

Error when running nx from a GitHub Action

Command failed: npx --no-install nx workspace-lint
nx workspace-lint [files..]

Lint workspace or list of files.  Note: To exclude files from this lint rule, you can add them to the ".nxignore" file

Options:
  --help     Show help  [boolean]
  --version  Show version number  [boolean]

Error [ERR_WORKER_INVALID_EXEC_ARGV]: Initiated Worker with invalid NODE_OPTIONS env variable: --use-openssl-ca is not allowed in NODE_OPTIONS
    at new NodeError (internal/errors.js:322:7)
    at new Worker (internal/worker.js:199:13)
    at createWorkerPool (/tmp/renovate/repos/github/ng-easy/platform/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:129:18)
    at buildExplicitDependenciesUsingWorkers (/tmp/renovate/repos/github/ng-easy/platform/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:143:21)
    at /tmp/renovate/repos/github/ng-easy/platform/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:95:20
    at Generator.next (<anonymous>)
    at /tmp/renovate/repos/github/ng-easy/platform/node_modules/tslib/tslib.js:117:75
    at new Promise (<anonymous>)
    at Object.__awaiter (/tmp/renovate/repos/github/ng-easy/platform/node_modules/tslib/tslib.js:113:16)
    at buildExplicitDependencies (/tmp/renovate/repos/github/ng-easy/platform/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:87:20) {
  code: 'ERR_WORKER_INVALID_EXEC_ARGV'
}

Expected Behavior

It works

Steps to Reproduce

Run in linux, with NODE_OPTIONs=--use-openssl-ca and the CAP_NET_BIND_SERVICE capability on Node

https://github.com/nodejs/node/issues/31131

Failure Logs

Environment

Renovate runner

[viceice]

Also seeing this since nx v13

+ yarn build:libs -c production
yarn run v1.22.17
$ nx run-many --target build --projects "a,b,c" -c production
nx run-many

Run target for multiple listed projects

Options:
  --help           Show help  [boolean]
  --version        Show version number  [boolean]
  --target         Task to run for affected projects  [string] [required]
  --parallel       Parallelize the command  [boolean] [default: false]
  --maxParallel    Max number of parallel processes. This flag is ignored if the parallel option is set to `false`.  [number] [default: 3]
  --projects       Projects to run (comma delimited)  [string]
  --all            Run the target on all projects in the workspace  [boolean]
  --runner         Override the tasks runner in `nx.json`  [string]
  --skip-nx-cache  Rerun the tasks even when the results are available in the cache  [boolean] [default: false]
  --configuration  This is the configuration to use when performing tasks on projects  [string]
  --with-deps      Include dependencies of specified projects when computing what to run  [deprecated: Configure target dependencies instead. It will be removed in v14.] [boolean] [default: false]
  --only-failed    Only run the target on projects which previously failed  [boolean] [default: false]
  --exclude        Exclude certain projects from being processed  [array] [default: []]
  --verbose        Print additional error stack trace on failure

Examples:
  run-many --target=test --all                                              Test all projects
  run-many --target=test --projects=proj1,proj2                             Test proj1 and proj2
  run-many --target=test --projects=proj1,proj2 --parallel --maxParallel=2  Test proj1 and proj2 in parallel

Find more information and examples at https://nx.dev/cli/run-many

Error [ERR_WORKER_INVALID_EXEC_ARGV]: Initiated Worker with invalid NODE_OPTIONS env variable: --use-openssl-ca is not allowed in NODE_OPTIONS
    at new NodeError (internal/errors.js:322:7)
    at new Worker (internal/worker.js:199:13)
    at createWorkerPool (/drone/src/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:129:18)
    at buildExplicitDependenciesUsingWorkers (/drone/src/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:143:21)
    at /drone/src/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:95:20
    at Generator.next (<anonymous>)
    at /drone/src/node_modules/tslib/tslib.js:117:75
    at new Promise (<anonymous>)
    at Object.__awaiter (/drone/src/node_modules/tslib/tslib.js:113:16)
    at buildExplicitDependencies (/drone/src/node_modules/@nrwl/workspace/src/core/project-graph/build-project-graph.js:87:20) {
  code: 'ERR_WORKER_INVALID_EXEC_ARGV'
}
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.
error Command failed with exit code 1.

[robinpellegrims]

We get this issue after upgrading to Angular 14.2 with “@angular-eslint/builder” in Version 14.0.3. Seems it uses also some nrwl stuff which leeds to the same issue.

This issue pops up in our pipeline’s docker image where ENV NODE_OPTIONS --use-openssl-ca is being set.

@robinpellegrims Could you explain your workaround a bit? How to know the correct path for NODE_EXTRA_CA_CERTS?

In our case the certificates could be found in /usr/local/share/ca-certificates, but I suppose it depends on the OS that is used.