Docs: Update for certutil in container (#108751)

Co-authored-by: Roman Pertl <roman@pertl.org>
2025-07-28 09:12:30 +02:00
parent 713c9921ac
commit d0b791000d
1 changed files with 5 additions and 0 deletions
@@ -112,6 +112,11 @@ RUN update-ca-certificates --fresh

 # Reassume the nonroot user for the service execution.
 USER nonroot
+
+# Some CA certificates also need to explicitly be included in the user's network security services database.
+# certutil is shipped in v4.0.8 and onwards of the image.
+RUN mkdir -p /home/nonroot/.pki/nssdb
+RUN certutil -d sql:/home/nonroot/.pki/nssdb -A -n internal-root-ca -t C -i /usr/local/share/ca-certificates/rootCA.crt
 ```

 {{< admonition type="note" >}}