From 3437c8be7f88fc17f1f540c51c0a05fef0ce5e17 Mon Sep 17 00:00:00 2001 From: Roman Pertl <533172+roock@users.noreply.github.com> Date: Fri, 27 Sep 2024 14:00:57 +0200 Subject: [PATCH] Docs: grafana image renderer instructions custom cert in container (#93646) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> --- .../image-rendering/troubleshooting/index.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md b/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md index 34d220c51b2..ece628061d3 100644 --- a/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md +++ b/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md @@ -125,6 +125,22 @@ If this happens, then you have to add the certificate to the trust store. If you certutil –addstore "Root" /internal-root-ca.crt.pem ``` +**Container:** + +```Dockerfile +FROM grafana/grafana-image-renderer:latest + +USER root + +RUN apk add --no-cache nss-tools + +USER grafana + +COPY internal-root-ca.crt.pem /etc/pki/tls/certs/internal-root-ca.crt.pem +RUN mkdir -p /home/grafana/.pki/nssdb +RUN certutil -d sql:/home/grafana/.pki/nssdb -A -n internal-root-ca -t C -i /etc/pki/tls/certs/internal-root-ca.crt.pem +``` + ## Custom Chrome/Chromium As a last resort, if you already have [Chrome](https://www.google.com/chrome/) or [Chromium](https://www.chromium.org/)