[release-12.1.1] Docs: Update for certutil in container (#108752)

Co-authored-by: Mariell Hoversholm <mariell.hoversholm@grafana.com> Co-authored-by: Roman Pertl <roman@pertl.org>
2025-07-28 12:21:41 +02:00
parent 302e95684d
commit 38b5ba191c
1 changed files with 5 additions and 0 deletions
@@ -112,6 +112,11 @@ RUN update-ca-certificates --fresh

 # Reassume the nonroot user for the service execution.
 USER nonroot
+
+# Some CA certificates also need to explicitly be included in the user's network security services database.
+# certutil is shipped in v4.0.8 and onwards of the image.
+RUN mkdir -p /home/nonroot/.pki/nssdb
+RUN certutil -d sql:/home/nonroot/.pki/nssdb -A -n internal-root-ca -t C -i /usr/local/share/ca-certificates/rootCA.crt
 ```

 {{< admonition type="note" >}}