base-images/tests/Containerfile.test-ca-trust
Joseph Marrero Corchado 436ea4309c standard: Focus boot-time regeneration on CA trust
Rename the service to atomic-update-ca-trust, remove the legacy extract argument, and defer crypto-policy regeneration. Document early-boot and initramfs limitations and keep regeneration failures visible without preventing boot.

Add standard-image regression coverage for stale bundles, vendor CA changes, local trust and distrust, repeated refreshes, and service activation.
2026-10-31 16:44:10 -04:00

5 lines
227 B
Text

# This is a disposable image: the test modifies vendor and local trust sources.
# Replace the base with the image under test using --from.
FROM localhost/fedora-bootc
COPY ca-trust.sh /tmp/ca-trust.sh
RUN bash /tmp/ca-trust.sh