mathieu/dash
1
0
Fork 0
Code Issues Pull requests Releases 8 Activity Actions

Install company CA certificates at image build time #7

Merged
mathieu merged 1 commit from lain/ca-certs-at-build-20261102150844 into main 2026-11-02 14:14:46 +00:00
Conversation 0 Commits 1 Files changed 7 +92 -76
Lain commented 2026-11-02 14:10:26 +00:00
Collaborator
Copy link

Moves the ca_certificates install from sandbox start to dash build.

  • image.Build copies each configured PEM into the build context; the Containerfile installs them into /usr/local/share/ca-certificates/ and runs update-ca-certificates as root, so sandboxes start faster.
  • Removed the runtime bind mount and the entrypoint install step from #6.
  • CA_CERT_COUNT build arg; missing or relative paths fail the build.
  • Docs updated: rebuild with dash build after changing the list.

Verified: gofmt, go vet, go test ./internal/..., bash -n, dry-run prints CA_CERT_COUNT=1.
Not verified: an actual podman build with certificates (not run here).

Moves the `ca_certificates` install from sandbox start to `dash build`. - `image.Build` copies each configured PEM into the build context; the Containerfile installs them into `/usr/local/share/ca-certificates/` and runs `update-ca-certificates` as root, so sandboxes start faster. - Removed the runtime bind mount and the entrypoint install step from #6. - `CA_CERT_COUNT` build arg; missing or relative paths fail the build. - Docs updated: rebuild with `dash build` after changing the list. Verified: gofmt, go vet, go test ./internal/..., bash -n, dry-run prints CA_CERT_COUNT=1. Not verified: an actual podman build with certificates (not run here).
Install company CA certificates at image build time
All checks were successful
ci / test (pull_request) Successful in 1m17s
Details
fd6081c5c7
mathieu deleted branch lain/ca-certs-at-build-20261102150844 2026-11-02 14:14:47 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
mathieu/dash!7
No description provided.