From 5bce4d1d6d4a3e8157b347171368bd5f2b71bdc8 Mon Sep 17 00:00:00 2001
From: Nicolas K <nkarageuzian@gmail.com>
Date: Fri, 10 Nov 2023 14:53:22 +0100
Subject: [PATCH] Add common certs in trusted store of default docker image

---
 .dockerignore                        | 2 ++
 contrib/docker/Dockerfile            | 2 +-
 contrib/docker/build-docker-image.sh | 4 ++++
 3 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 .dockerignore

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..48402ed
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,2 @@
+Dockerfile
+contrib/docker
\ No newline at end of file
diff --git a/contrib/docker/Dockerfile b/contrib/docker/Dockerfile
index 2e90d9e..a804909 100644
--- a/contrib/docker/Dockerfile
+++ b/contrib/docker/Dockerfile
@@ -8,7 +8,7 @@ RUN cargo build --release
 
 FROM debian:$TARGET-slim
 
-RUN apt-get update && apt-get install -y openssl && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y openssl ca-certificates && rm -rf /var/lib/apt/lists/*
 COPY --from=builder /code/target/release/acmed /usr/local/bin/acmed
 COPY --from=builder /code/target/release/tacd  /usr/local/bin/tacd
 CMD ["/usr/local/bin/acmed", "-f", "--log-stderr"]
\ No newline at end of file
diff --git a/contrib/docker/build-docker-image.sh b/contrib/docker/build-docker-image.sh
index 2486f64..50f6f35 100755
--- a/contrib/docker/build-docker-image.sh
+++ b/contrib/docker/build-docker-image.sh
@@ -1,4 +1,8 @@
 #!/bin/bash
+# ACMED certificate watcher and renewer daemon.
+# Helper script to build debian based docker image
+# Author: Nicolas Karageuzian
+
 set -euo pipefail
 
 DIR="$( cd "$( dirname "$0" )/../.." >/dev/null 2>&1 && pwd )"