From d0b791000de182ebafed9ced2844d1ebed8558f0 Mon Sep 17 00:00:00 2001 From: Mariell Hoversholm Date: Mon, 28 Jul 2025 09:12:30 +0200 Subject: [PATCH] Docs: Update for certutil in container (#108751) Co-authored-by: Roman Pertl --- .../setup-grafana/image-rendering/troubleshooting/index.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md b/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md index a2f472bce26..61cd711bd50 100644 --- a/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md +++ b/docs/sources/setup-grafana/image-rendering/troubleshooting/index.md @@ -112,6 +112,11 @@ RUN update-ca-certificates --fresh # Reassume the nonroot user for the service execution. USER nonroot + +# Some CA certificates also need to explicitly be included in the user's network security services database. +# certutil is shipped in v4.0.8 and onwards of the image. +RUN mkdir -p /home/nonroot/.pki/nssdb +RUN certutil -d sql:/home/nonroot/.pki/nssdb -A -n internal-root-ca -t C -i /usr/local/share/ca-certificates/rootCA.crt ``` {{< admonition type="note" >}}