5.2. 使用 Containerfile 将自定义证书导入到容器
使用 Containerfile
构建它,使用自定义证书创建新容器镜像。
流程
创建
Containerfile
:FROM <internal_repository>/<image> RUN mkdir -p /etc/pki/ca-trust/extracted/pem/ COPY tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/ RUN rm -rf /etc/yum.repos.d/* COPY echo-rhel9_4.repo /etc/yum.repos.d/
FROM <internal_repository>/<image> RUN mkdir -p /etc/pki/ca-trust/extracted/pem/ COPY tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/ RUN rm -rf /etc/yum.repos.d/* COPY echo-rhel9_4.repo /etc/yum.repos.d/
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 构建自定义镜像:
podman build -t <your_image> .
# podman build -t <your_image> .
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 运行 <
;your_image>
:podman run -it --rm <your_image>
# podman run -it --rm <your_image>
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
验证
列出容器内的证书:
ls -l /etc/pki/ca-trust/extracted/pem/
# ls -l /etc/pki/ca-trust/extracted/pem/ tls-ca-bundle.pem
Copy to Clipboard Copied! Toggle word wrap Toggle overflow