Chapter 3. Secure communication for containerized applications

Procedure

1. Start an interactive session with the default Podman machine:

   $ podman machine ssh <machine_name>

2. Optional: If Podman runs in the default rootless mode, switch to a root shell:

   $ sudo su -

3. Change to the directory where the certificates must be placed:

   $ cd /etc/pki/ca-trust/source/anchors

4. Perform one of the following steps to obtain the certificate:

   • Use the curl command to download a certificate:

     $ curl [-k] -o <my-certificate> https://<my-server.com/my-certificate>

   • Use any editor, such as Notepad or Vim to create a certificate file with .crt, .cer, or .pem extension.

     Note

     You can convert a certificate file to a text file and copy its content to the editor.

5. Add the certificate to the list of trusted certificates:

   $ update-ca-trust

6. Optional: To exit the root shell, run the following command:

   $ exit

7. Run the exit command to exit the Podman machine.

8. To apply your changes, reboot the Podman machine:

   $ podman machine stop <machine_name>
   $ podman machine start <machine_name>