dockerfile - Docker distroless image 如何将自定义证书添加到信任库？

Question

gcr.io/distroless/java

如何添加自定义 pki 证书？

Answer 1

distroless 映像基于 Debian 9，因此您可以进行多阶段构建并执行以下操作：

FROM debian AS build-env

# Add CA files
ADD my-ca-file.crt /usr/local/share/ca-certificates/my-ca-file.crt
RUN update-ca-certificates

FROM gcr.io/distroless/base
COPY --from=build-env /etc/ssl/certs /etc/ssl/certs