Skip to content

Commit edc1a4f

Browse files
authored
Install CA certificates on docker image (#1612)
Currently, we install ca-certificates package only on the builder, not on the docker image which is distributed to the user. Without CA certificates, we see errors like below, ``` 2024-09-18T05:30:46.112001Z ERROR Connecting to PostgreSQL <host name>: SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY DB-CONNECTION-ERROR: Failed to connect to pgsql at "<host name>" (port 30025) as user "tsdbadmin": SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY An unhandled error condition has been signalled: Failed to connect to pgsql at "<host name>" (port 30025) as user "tsdbadmin": SSL verify error: 20 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY ``` Signed-off-by: Arunprasad Rajkumar <ar.arunprasad@gmail.com>
1 parent 29afa9d commit edc1a4f

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

Dockerfile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ FROM debian:bookworm-slim
3434

3535
RUN apt-get update \
3636
&& apt-get install -y --no-install-recommends \
37+
ca-certificates \
3738
curl \
3839
freetds-dev \
3940
gawk \
@@ -42,6 +43,7 @@ FROM debian:bookworm-slim
4243
make \
4344
sbcl \
4445
unzip \
46+
&& update-ca-certificates \
4547
&& rm -rf /var/lib/apt/lists/*
4648

4749
COPY --from=builder /opt/src/pgloader/build/bin/pgloader /usr/local/bin

0 commit comments

Comments
 (0)