From edc1a4fde960081c81f50c13dfb8a75b536ee94c Mon Sep 17 00:00:00 2001 From: Arunprasad Rajkumar Date: Wed, 18 Sep 2024 15:07:57 +0530 Subject: [PATCH] Install CA certificates on docker image (#1612) Currently, we install ca-certificates package only on the builder, not on the docker image which is distributed to the user. Without CA certificates, we see errors like below, ``` 2024-09-18T05:30:46.112001Z ERROR Connecting to PostgreSQL : SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY DB-CONNECTION-ERROR: Failed to connect to pgsql at "" (port 30025) as user "tsdbadmin": SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY An unhandled error condition has been signalled: Failed to connect to pgsql at "" (port 30025) as user "tsdbadmin": SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY ``` Signed-off-by: Arunprasad Rajkumar --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index 1d0117a8..3c34f0ad 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,6 +34,7 @@ FROM debian:bookworm-slim RUN apt-get update \ && apt-get install -y --no-install-recommends \ + ca-certificates \ curl \ freetds-dev \ gawk \ @@ -42,6 +43,7 @@ FROM debian:bookworm-slim make \ sbcl \ unzip \ + && update-ca-certificates \ && rm -rf /var/lib/apt/lists/* COPY --from=builder /opt/src/pgloader/build/bin/pgloader /usr/local/bin