5.2. Importing custom certificates to an image by using a Containerfile
Include instructions to install custom certificate roots with a Containerfile.
Procedure
Create a
Containerfile:FROM <internal_repository>/<image> # Add certificate to the input set of anchors COPY additional-certificate-root.pem /etc/pki/ca-trust/source/anchors RUN update-ca-trustBuild the custom image:
# podman build -t <your_image> .Run the
<your_image>:# podman run -it --rm <your_image>
Verification
Verify your certificate is in the generated merged store:
# cat etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem ...