Skip to content

Commit f6e3bbc

Browse files
committed
fix: update CA certificates with ISRG Root X2
1 parent 2afc1cf commit f6e3bbc

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

Dockerfile

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,15 @@ WORKDIR /app
77

88
RUN apt-get update && \
99
apt-get -y install libpq-dev curl git libicu-dev build-essential && \
10+
apt-get upgrade ca-certificates && \
1011
curl https://deb.nodesource.com/setup_16.x | bash && \
1112
apt-get install -y nodejs && \
1213
npm install --global yarn && \
1314
gem install bundler:2.4.9
1415

16+
ADD https://letsencrypt.org/certs/isrg-root-x2.pem /etc/ssl/certs/ISRG_ROOT_X2.pem
17+
RUN chmod 644 /etc/ssl/certs/ISRG_ROOT_X2.pem && update-ca-certificates
18+
1519
COPY Gemfile* ./
1620
RUN bundle config set --local without 'development test' && \
1721
bundle install -j"$(nproc)"
@@ -41,10 +45,11 @@ ENV RAILS_ENV=production \
4145

4246
RUN apt update && \
4347
apt install -y postgresql-client imagemagick libproj-dev proj-bin libjemalloc2 && \
48+
apt upgrade ca-certificates && \
4449
gem install bundler:2.4.9
4550

46-
ADD https://letsencrypt.org/certs/isrg-root-x2.pem /usr/local/share/ca-certificates/isrg-root-x2.pem
47-
RUN chmod 644 /usr/local/share/ca-certificates/isrg-root-x2.pem && update-ca-certificates
51+
ADD https://letsencrypt.org/certs/isrg-root-x2.pem /etc/ssl/certs/ISRG_ROOT_X2.pem
52+
RUN chmod 644 /etc/ssl/certs/ISRG_ROOT_X2.pem && update-ca-certificates
4853

4954
WORKDIR /app
5055

0 commit comments

Comments
 (0)