Remove nss certs completely.

This commit is contained in:
viferga 2019-09-19 11:20:18 -08:00
parent 1d4a715cdc
commit dc6352d14a

@ -32,9 +32,7 @@ LABEL copyright.name="Vicente Eduardo Ferrer Garcia" \
ARG METACALL_GUIX_VERSION
ARG METACALL_GUIX_ARCH
ENV GUIX_PROFILE="/root/.config/guix/current" \
GIT_SSL_CAINFO="${GUIX_PROFILE}/etc/ssl/certs/ca-certificates.crt${GIT_SSL_CAINFO:+:}$GIT_SSL_CAINFO" \
SSL_CERT_DIR="${GUIX_PROFILE}/etc/ssl/certs${SSL_CERT_DIR:+:}$SSL_CERT_DIR"
ENV GUIX_PROFILE="/root/.config/guix/current"
# Copy entry point
COPY scripts/entry-point.sh /entry-point.sh
@ -65,7 +63,7 @@ RUN apk add --no-cache --update --virtual .build-deps shadow \
# Run pull (https://github.com/docker/buildx/blob/master/README.md#--allowentitlement)
RUN --security=insecure source $GUIX_PROFILE/etc/profile \
&& ~root/.config/guix/current/bin/guix-daemon --build-users-group=guixbuild & (guix pull; guix package -i nss-certs)
&& ~root/.config/guix/current/bin/guix-daemon --build-users-group=guixbuild & guix pull
ENTRYPOINT ["/entry-point.sh"]
CMD ["sh"]