add ca certificates to the OCI image

Without this, checking the authority of TLS certificates fails, making Conduit (rightly) refuse to connect to anything.
2024-01-27 12:23:57 -08:00
parent 4da8c7e282
commit dffd771e7c
1 changed files with 3 additions and 0 deletions
--- a/flake.nix
+++ b/flake.nix
@@ -167,6 +167,9 @@
        pkgs.dockerTools.buildImage {
          name = package.pname;
          tag = "next";
+          copyToRoot = [
+            pkgs.dockerTools.caCertificates
+          ];
          config = {
            # Use the `tini` init system so that signals (e.g. ctrl+c/SIGINT)
            # are handled as expected