Skip to content

fix(net): install tls ca certs into trust directories#767

Merged
toksdotdev merged 1 commit into
mainfrom
tls-ca-trust-dirs
May 20, 2026
Merged

fix(net): install tls ca certs into trust directories#767
toksdotdev merged 1 commit into
mainfrom
tls-ca-trust-dirs

Conversation

@toksdotdev
Copy link
Copy Markdown
Member

@toksdotdev toksdotdev commented May 20, 2026

summary

  • creates guest ca trust directories before copying the microsandbox ca into them
  • sets newly-created trust directories to 0755 so behavior does not depend on agentd's umask

closes #700. also partly related to #756.

note

this does not run update-ca-certificates directly; it makes the ca available for later distro trust-store refreshes.

@toksdotdev toksdotdev force-pushed the tls-ca-trust-dirs branch from 80e7be4 to 6814db8 Compare May 20, 2026 12:06
@toksdotdev toksdotdev changed the title Install TLS CA certs into trust directories fix(net): install tls ca certs into trust directories May 20, 2026
@toksdotdev toksdotdev marked this pull request as ready for review May 20, 2026 13:35
@toksdotdev toksdotdev requested a review from appcypher as a code owner May 20, 2026 13:35
@toksdotdev toksdotdev merged commit 79511a9 into main May 20, 2026
27 checks passed
@toksdotdev toksdotdev deleted the tls-ca-trust-dirs branch May 20, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Also inject TLS certificate as a standalone file in /usr/local/share/ca-certificates when that directory exists (Ubuntu, Debian, Etc)

1 participant