mirror of
https://gitlab.com/fedora/bootc/base-images.git
synced 2026-11-06 20:48:54 +00:00
Rename the service to atomic-update-ca-trust, remove the legacy extract argument, and defer crypto-policy regeneration. Document early-boot and initramfs limitations and keep regeneration failures visible without preventing boot. Add standard-image regression coverage for stale bundles, vendor CA changes, local trust and distrust, repeated refreshes, and service activation.
5 lines
227 B
Text
5 lines
227 B
Text
# This is a disposable image: the test modifies vendor and local trust sources.
|
|
# Replace the base with the image under test using --from.
|
|
FROM localhost/fedora-bootc
|
|
COPY ca-trust.sh /tmp/ca-trust.sh
|
|
RUN bash /tmp/ca-trust.sh
|