第 5 章 Best practices for running containers by using local sources

Procedure

• Run a bootc-image-builder and use a bind mount, for example -v /etc/pki:/etc/pki, to override the container’s store with the host’s:

  # podman run \
    --rm \
    -it \
    --privileged \
    --pull=newer \
    --security-opt label=type:unconfined_t \
    -v ./output:/output \
    -v /etc/pki:/etc/pki \
    registry.redhat.io/rhel10/bootc-image-builder:latest \
    --type iso \
    --config /config.toml \
    quay.io/<namespace>/<image>:<tag>

Verification

• The disk image build process should now be able to access internal certificates.