@@ -16,11 +16,10 @@ This requires that LocalStack is able to access public URLs.
1616If there is a proxy server in your network that uses a non-standard TLS certificate, LocalStack will not be able to download any files on demand.
1717You may see errors in the logs relating to TLS such as "unable to get local issuer certificate".
1818
19- There are three options when running LocalStack:
19+ There are two options when running LocalStack:
2020
21- 1 . [ creating a custom Docker image] ( #creating-a-custom-docker-image ) ,
22- 2 . [ using init hooks] ( #custom-tls-certificates-with-init-hooks ) or
23- 3 . [ when running in host mode] ( #custom-tls-certificates-with-host-mode ) .
21+ 1 . [ creating a custom Docker image] ( #creating-a-custom-docker-image ) or
22+ 2 . [ using init hooks] ( #custom-tls-certificates-with-init-hooks )
2423
2524They all can be summarised as:
2625
@@ -108,45 +107,3 @@ Then run LocalStack with the environment variables
108107* ` NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt `
109108
110109and follow the instructions fn the [ init hooks documentation] ( /aws/capabilities/config/initialization-hooks ) for configuring LocalStack to use the hook directory as a ` boot ` hook.
111-
112- ## Custom TLS certificates with host mode
113-
114- ### Linux
115-
116- On linux the custom certificate should be added to your ` ca-certificates ` bundle.
117- For example on Debian based systems (as root):
118-
119- ``` bash
120- # cp <your custom certificate.crt> /usr/local/share/ca-certificates
121-
122- # update-ca-certificates
123-
124- ```
125-
126- Then run LocalStack with the environment variables ` REQUESTS_CA_BUNDLE ` , ` CURL_CA_BUNDLE ` , and `NODE_EXTRA_CA_CERTS``:
127-
128- ``` bash
129- NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt \
130- CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
131- REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
132- localstack start --host
133- ```
134-
135- ### macOS
136-
137- On macOS the custom certificate should be added to your keychain.
138- See [ this Apple support article] ( https://support.apple.com/en-gb/guide/keychain-access/kyca2431/mac ) for more information.
139-
140- Then run LocalStack with the environment variables ` REQUESTS_CA_BUNDLE ` , ` CURL_CA_BUNDLE ` , and `NODE_EXTRA_CA_CERTS``:
141-
142- ``` bash
143- NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt \
144- CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
145- REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt \
146- localstack start --host
147- ```
148-
149- ### Windows
150-
151- Currently host mode does not work with Windows.
152- If you are using WSL2 you should follow the [ Linux] ( #linux ) steps above.
0 commit comments