public_git/kaniko
1
0
Fork 0
mirror of https://github.com/GoogleContainerTools/kaniko synced 2026-10-08 15:41:25 +02:00
Code Issues Releases Wiki Activity

Use up-to-date ca-certificates during build (#1580)

Browse Source
This commit is contained in:
Sascha Schwarze
2021-02-22 21:25:00 -08:00
committed by GitHub
parent adf5c7a810
commit 2d4db8e0ec
5 changed files with 40 additions and 4312 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/Dockerfile_debug
+10 -1
View File
@@ -50,6 +50,15 @@ RUN mkdir -p /kaniko/.docker
COPY . .
RUN make GOARCH=$(cat /goarch) && make GOARCH=$(cat /goarch.txt) out/warmer
# Generate latest ca-certificates
FROM debian:buster-slim AS certs
RUN \
apt update && \
apt install -y ca-certificates && \
cat /etc/ssl/certs/* > /ca-certificates.crt
FROM scratch
COPY --from=0 /go/src/github.com/GoogleContainerTools/kaniko/out/* /kaniko/
COPY --from=0 /go/src/github.com/GoogleContainerTools/kaniko/out/warmer /kaniko/warmer
@@ -61,7 +70,7 @@ COPY --from=busybox:1.32.0 /bin /busybox
# Declare /busybox as a volume to get it automatically in the path to ignore
VOLUME /busybox
COPY files/ca-certificates.crt /kaniko/ssl/certs/
COPY --from=certs /ca-certificates.crt /kaniko/ssl/certs/
COPY --from=0 /kaniko/.docker /kaniko/.docker
COPY files/nsswitch.conf /etc/nsswitch.conf
ENV HOME /root