From fee7c88a0432ff80a0e30101392491734823d188 Mon Sep 17 00:00:00 2001
From: Peter Dave Hello <hsu@peterdavehello.org>
Date: Tue, 6 Aug 2019 00:31:00 +0800
Subject: [PATCH] Separate `update-ca-certificates` in Dockerfile

Combine it with apk operation, will cause missing error issues due to
the following `|| true`, we should prevent that and let apk fail when
it's needed.
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 1eae90f..0ff383b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,8 +7,8 @@ ENV CFLAGS=-Ofast
 ENV BUILD_DEPS   make gcc musl-dev git libevent-dev expat-dev shadow autoconf file openssl-dev byacc linux-headers
 ENV RUNTIME_DEPS bash util-linux coreutils findutils grep openssl ldns ldns-tools libevent expat libexecinfo coreutils drill ca-certificates
 
-RUN apk --no-cache upgrade && apk add --no-cache $RUNTIME_DEPS && \
-    update-ca-certificates 2> /dev/null || true
+RUN apk --no-cache upgrade && apk add --no-cache $RUNTIME_DEPS
+RUN update-ca-certificates 2> /dev/null || true
 
 ENV UNBOUND_GIT_URL https://github.com/jedisct1/unbound.git
 ENV UNBOUND_GIT_REVISION 4edb15ba417c78710069a5be8be3a6b5d8bdba9c