Remove nss certs completely.
This commit is contained in:
parent
1d4a715cdc
commit
dc6352d14a
@ -32,9 +32,7 @@ LABEL copyright.name="Vicente Eduardo Ferrer Garcia" \
|
|||||||
ARG METACALL_GUIX_VERSION
|
ARG METACALL_GUIX_VERSION
|
||||||
ARG METACALL_GUIX_ARCH
|
ARG METACALL_GUIX_ARCH
|
||||||
|
|
||||||
ENV GUIX_PROFILE="/root/.config/guix/current" \
|
ENV GUIX_PROFILE="/root/.config/guix/current"
|
||||||
GIT_SSL_CAINFO="${GUIX_PROFILE}/etc/ssl/certs/ca-certificates.crt${GIT_SSL_CAINFO:+:}$GIT_SSL_CAINFO" \
|
|
||||||
SSL_CERT_DIR="${GUIX_PROFILE}/etc/ssl/certs${SSL_CERT_DIR:+:}$SSL_CERT_DIR"
|
|
||||||
|
|
||||||
# Copy entry point
|
# Copy entry point
|
||||||
COPY scripts/entry-point.sh /entry-point.sh
|
COPY scripts/entry-point.sh /entry-point.sh
|
||||||
@ -65,7 +63,7 @@ RUN apk add --no-cache --update --virtual .build-deps shadow \
|
|||||||
|
|
||||||
# Run pull (https://github.com/docker/buildx/blob/master/README.md#--allowentitlement)
|
# Run pull (https://github.com/docker/buildx/blob/master/README.md#--allowentitlement)
|
||||||
RUN --security=insecure source $GUIX_PROFILE/etc/profile \
|
RUN --security=insecure source $GUIX_PROFILE/etc/profile \
|
||||||
&& ~root/.config/guix/current/bin/guix-daemon --build-users-group=guixbuild & (guix pull; guix package -i nss-certs)
|
&& ~root/.config/guix/current/bin/guix-daemon --build-users-group=guixbuild & guix pull
|
||||||
|
|
||||||
ENTRYPOINT ["/entry-point.sh"]
|
ENTRYPOINT ["/entry-point.sh"]
|
||||||
CMD ["sh"]
|
CMD ["sh"]
|
||||||
|
Loading…
Reference in New Issue
Block a user