waiverdb

#239 Add CA_URL env var to image
Merged by lholecek. Opened by rayson.
rayson/waiverdb container-download-ca  into  master

Download 239.patch

Fixes #238
An entrypoint script will download and install the CA certificate
at container start.

rebased onto 9900698bca2d4b4ac2722475b0e80fcfa04770cc

rebased onto 5db08333222b76d2d1812a47fd4d7e571d498b35

rebased onto 3ea642f9eaaed12fc1015705bcf8e812f3122a6e

Seems the user in container is in root group. Is that safe?

How does the USER 1001 work without calling useradd?

@lholecek I am also not sure if it is acceptable to grant the root group write permission to the trust CA bundle file.
USER 1001 is not actually used by OpenShift, which will start the process with a 'random' UID with root group. Use of USER 1001 is described in OpenShift Image Guidelines.

Ps.
This does the same way as Estuary (Dockerfile, install-ca.sh). If this is unacceptable, I'll go with REQUESTS_CA_BUNDLE variables (#238).

+1

(Tests on Jenkins fail basically because the host name is too long.)

Pull-Request has been merged by lholecek
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.